[codex] Use single Sona runner

[thewh1teagle]

Summary

This updates Vibe for the new Rust Sona single-runner release.

• bumps .sona-version to v0.2.2
• removes the separate sona-diarize sidecar from spawning, bundling, and pre-build downloads
• keeps diarization as an in-process Sona capability via the existing diarize_model request option
• updates architecture and local build docs from the old Go/CGo sidecar model to the Rust runner model

Why

Sona now ships as one Rust runner binary with in-process diarization via diarize-rs. The old Vibe integration still expected a separate sona-diarize binary and SONA_DIARIZE_PATH, which no longer matches the release asset layout for v0.2.2.

Validation

• cargo fmt --manifest-path desktop/src-tauri/Cargo.toml --check
• python3 -m py_compile scripts/pre_build.py
• uv run scripts/pre_build.py --target x86_64-unknown-linux-gnu
• uv run scripts/pre_build.py --target aarch64-apple-darwin
• cargo check --manifest-path desktop/src-tauri/Cargo.toml

Note: pnpm exec prettier --check ... could not run locally because prettier is not installed in the desktop workspace.

Follow-up: CPAL Permission Check Branch

This also points Vibe's cpal dependency at thewh1teagle/cpal branch feat/macos-system-audio-permission-check, the head of RustAudio/cpal#1257. That branch includes the macOS system-audio permission check work and exposes the permission helpers under cpal::platform.

Additional Vibe adjustments:

• calls cpal::platform::request_system_audio_permission
• calls cpal::platform::open_system_audio_settings
• updates build_input_stream usage for the newer CPAL API

[thewh1teagle]

Depends on

• feat(coreaudio): add macOS system audio permission helpers RustAudio/cpal#1124