feat(pdf): vendor in-tree kkpdf_zed engine and harden PDF security whitelist

Cargo.lock

@@ -9454,8 +9454,9 @@ dependencies = [
  "log",
  "parking_lot",
  "pdfium-render",
- "schemars 0.8.22",
  "serde",
+ "serde_json",
+ "tempfile",
 ]
 
 [[package]]
@@ -15941,18 +15942,6 @@ dependencies = [
  "theme_settings",
 ]
 
-[[package]]
-name = "schemars"
-version = "0.8.22"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3fbf2ae1b8bc8e02df939598064d22402220cd5bbcca1c76f7d6a310974d5615"
-dependencies = [
- "dyn-clone",
- "schemars_derive 0.8.22",
- "serde",
- "serde_json",
-]
-
 [[package]]
 name = "schemars"
 version = "0.9.0"
@@ -15974,23 +15963,11 @@ dependencies = [
  "dyn-clone",
  "indexmap 2.14.0",
  "ref-cast",
- "schemars_derive 1.0.4",
+ "schemars_derive",
  "serde",
  "serde_json",
 ]
 
-[[package]]
-name = "schemars_derive"
-version = "0.8.22"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32e265784ad618884abaea0600a9adf15393368d840e0222d101a072f3f7534d"
-dependencies = [
- "proc-macro2",
- "quote",
- "serde_derive_internals",
- "syn 2.0.117",
-]
-
 [[package]]
 name = "schemars_derive"
 version = "1.0.4"