chore: drop unused deps (tracing-appender, zeroize, rustls in release), orphaned vendor lockfile and one-off verify_task.sh

crates/release/Cargo.toml

@@ -9,7 +9,6 @@ description = "Shared CodeWhale release discovery and version comparison helpers
 [dependencies]
 anyhow.workspace = true
 reqwest = { workspace = true, features = ["blocking"] }
-rustls.workspace = true
 semver.workspace = true
 serde.workspace = true
 serde_json.workspace = true

crates/tui/Cargo.toml

@@ -58,14 +58,12 @@ chrono = { version = "0.4", features = ["serde"] }
 tempfile = "3.16"
 thiserror = "2.0"
 tracing = "0.1"
-tracing-appender = { workspace = true }
 tracing-subscriber = { workspace = true }
 tower-http = { version = "0.6", features = ["cors"] }
 wait-timeout = "0.2"
 multimap = "0.10.0"
 shlex = "1.3.0"
 tiny_http = "0.12"
-zeroize = "1.8.2"
 ignore = "0.4"
 image = { version = "0.25", default-features = false, features = ["png"] }
 lru = "0.16"

crates/tui/src/core/engine/streaming.rs

@@ -32,7 +32,7 @@ pub(super) const STREAM_MAX_CONTENT_BYTES: usize = 10 * 1024 * 1024; // 10 MB
 /// History: this used to be 300s (5 min) which was too aggressive — V4
 /// thinking turns on hard prompts legitimately exceed 5 minutes wall-clock
 /// while still emitting reasoning_content chunks the whole way. Bumped to
-/// 30 min in v0.6.6 to address `TODO_FIXES.md` #1. Codex defaults to a
+/// 30 min in v0.6.6 after long-reasoning turns hit the old cap. Codex defaults to a
 /// per-chunk idle of 300s with no wall-clock cap; we keep both layers but
 /// give the wall-clock a generous window so it never fires in practice.
 pub(super) const STREAM_MAX_DURATION_SECS: u64 = 1800; // 30 minutes (was 300s; #103/#1)