web: Snap Store badge, served from here

The badge image is vendored rather than hotlinked from snapcraft.io. The CSP
is img-src 'self' data: and would block it anyway, but the reason to leave the
CSP alone is the page's own claim: fetching a badge from someone else's server
hands them the address of every visitor to a page that says no servers are
involved.

The README badge stays dynamic — it reports the published version, and GitHub
proxies images, so no reader is exposed by it.

meta.json

@@ -1,10 +1,10 @@
 {
-  "version": "1788382788139",
-  "buildVersion": "1788382788139",
+  "version": "1788390440675",
+  "buildVersion": "1788390440675",
   "appVersion": "6.7.2",
-  "buildTime": "2026-09-02T20:59:48.213Z",
-  "buildId": "1788382788139-2294e38",
-  "gitHash": "2294e38",
+  "buildTime": "2026-09-02T23:07:20.764Z",
+  "buildId": "1788390440675-30e335f",
+  "gitHash": "30e335f",
   "generated": true,
-  "generatedAt": "2026-09-02T20:59:48.215Z"
+  "generatedAt": "2026-09-02T23:07:20.766Z"
 }