fix(release): stop shipping native modules built for the wrong runtime

The released installer could not start: it carried a better-sqlite3 build for the
host Node runtime instead of Electron, so the app died immediately with a module
version mismatch when it opened its database.

Packaging now proves the Electron build of every runtime-sensitive native module
before an installer or archive exists, and installers are produced only from that
verified tree, so the mistake cannot pass silently. The release pipelines run the
same check.

The default local model also pointed at a retired model: a *.gguf name that
Ollama cannot serve, while the settings, onboarding, and guide screens
recommended an older model. All of them now use the model the service code
already preferred.

.gitlab-ci.yml

@@ -251,6 +251,7 @@ package-windows:
     - npm run build --workspace=@d3ro/desktop
     - cd apps/desktop
     - npx electron-builder --win --x64 --config electron-builder.yml
+    - node scripts/ci/verify-native-abi.mjs
     - cd ../..
     - $releaseVersion = node -p "require('./release/product-version.json').version"
     - '& scripts/ci/verify-windows-release-artifact.ps1 -ExpectedVersion $releaseVersion -ExpectedSignerSubject $env:WIN_CSC_EXPECTED_SIGNER_SUBJECT -ReleaseDirectory "apps/desktop/release/$releaseVersion"'
@@ -282,6 +283,7 @@ package-macos:
     - npm run build --workspace=@d3ro/desktop
     - cd apps/desktop
     - npx electron-builder --mac --arm64 --config electron-builder.yml
+    - node scripts/ci/verify-native-abi.mjs
   artifacts:
     name: "d3ro-voice-macos-$CI_COMMIT_TAG"
     paths: