refactor: fixed security.yml and improved play/pause

- New `--media-pause-icon` option
- Unified play/pause button action
- Move MPRIS lookup to spawn_blocking
- Speed up security CI with cargo-binstall

.github/workflows/security.yml

@@ -25,10 +25,12 @@ jobs:
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
       
+      - name: Install cargo-binstall
+        run: curl -L --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/cargo-bins/cargo-binstall/main/install.sh | sh
+      
       - name: Install security tools
         run: |
-          cargo install cargo-audit 
-          cargo install cargo-deny 
+          cargo binstall --no-confirm cargo-audit cargo-deny cargo-cyclonedx cargo-outdated
       
       - name: Run cargo audit
         run: cargo audit
@@ -37,21 +39,16 @@ jobs:
         run: cargo deny check
       
       - name: Generate Software Bill of Materials (SBOM)
-        run: |
-          cargo install cargo-cyclonedx 
-          cargo cyclonedx --format json --output bom.json
+        run: cargo cyclonedx --format json --override-filename bom
       
       - name: Upload SBOM
         uses: actions/upload-artifact@v4
         with:
           name: sbom
           path: bom.json
-          retention-days: 90
       
       - name: Check for outdated dependencies
-        run: |
-          cargo install cargo-outdated 
-          cargo outdated --exit-code 1 || echo "Some dependencies are outdated"
+        run: cargo outdated --exit-code 1 || echo "Some dependencies are outdated"
       
       - name: Security summary
         run: |