Moves the client onto the freshly cut AllMyStuff release. MyOwnMesh stays
at v0.3.2 — AllMyStuff's own `.myownmesh-rev` is unchanged in this cut, so
the daemon pin doesn't move with it.

Pin sites, only some of which are .rev files:
  * .allmystuff-rev — the allmystuff-serve sidecar release the build.rs
    stage fetches and the installer bundles, and the version stamped into
    ALLMYSTUFF_PIN (the "keep a reused node current" check).
  * gui/src-tauri/Cargo.toml — the three linked source crates
    (allmystuff-node, -cec-protocol, -cec-consent) carry their own git
    tags outside .rev; bumped in lockstep so the compiled-in code matches
    the sidecar.

What v0.2.49 carries for this client:
  * `video_watch` gains an optional `decoder` argument (automatic /
    software) for the technician console's native H.264 rung. The node
    parses it with `opt()`, so a caller that omits it — this client does —
    keeps the old behaviour. The node-control contract is otherwise
    unchanged, so no CEC-side code change is needed.
  * `ensure_node_running_pinned` — the entry point this client uses at all
    four bring-up sites — now refuses to reuse OR launch a media/input
    node in Windows Session 0. That is the point of the change (a Session 0
    node captures a black desktop and can't inject input), but it is a
    behaviour change for `run --service`: the Windows service is installed
    as LocalSystem, so on a machine where the service is the only thing
    holding the node up it will now exit non-zero until an interactive
    node exists. The GUI path is unaffected — it runs in the user's
    session and may still spawn.

gui/src-tauri/Cargo.lock stays as-is per repo convention — it refreshes on
the next real release build. The v0.2.49 tag exists; its GitHub Release is
still building, and release.yml's sidecar fetch needs that published, so
cut this repo's release after it lands.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SPSYpc4kUZPg6z2qRr1vpk