Vendor OpenSSL for SQLCipher so the build works on Windows

The bundled-sqlcipher feature relied on a system OpenSSL for SQLCipher's
crypto — fine on macOS/Linux, but absent on Windows, where the release
build failed at libsqlite3-sys. Switch to
bundled-sqlcipher-vendored-openssl: OpenSSL is built from source, so the
build is self-contained and identical across all three OSes (and the AUR
package needs no system OpenSSL). Caught by the multi-OS release dispatch.

Cargo.lock

@@ -2690,6 +2690,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2e99fb7a497b1e3339bc746195567ed8d3e24945ecd636e3619d20b9de9e9149"
 dependencies = [
  "cc",
+ "openssl-sys",
  "pkg-config",
  "vcpkg",
 ]
@@ -3252,6 +3253,28 @@ version = "0.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7c87def4c32ab89d880effc9e097653c8da5d6ef28e6b539d313baaacfbafcbe"
 
+[[package]]
+name = "openssl-src"
+version = "300.6.0+3.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8e8cbfd3a4a8c8f089147fd7aaa33cf8c7450c4d09f8f80698a0cf093abeff4"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "openssl-sys"
+version = "0.9.116"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f28a22dc7140cda5f096e5e7724a6962ca81a7f8bfd2979f9b18c11af56318c4"
+dependencies = [
+ "cc",
+ "libc",
+ "openssl-src",
+ "pkg-config",
+ "vcpkg",
+]
+
 [[package]]
 name = "option-ext"
 version = "0.2.0"

crates/bridge/Cargo.toml

@@ -30,7 +30,10 @@ base64 = "0.22"
 dirs = "6"
 anyhow = "1"
 rand_core = "0.6"
-rusqlite = { version = "0.32", features = ["bundled-sqlcipher"] }
+# Vendor OpenSSL for SQLCipher so the build needs no system OpenSSL — works
+# identically on macOS / Linux / Windows (Windows has none) and keeps the AUR
+# package self-contained.
+rusqlite = { version = "0.32", features = ["bundled-sqlcipher-vendored-openssl"] }
 hex = "0.4"
 
 # OS keychain backend — one per platform so the CLI builds (and packages,