chore(release): v0.9.2 (#396)

Bugfix release. Since v0.9.1:

- Immich outages surface as 503 with Retry-After instead of a cacheable
  404, so a transient failure can no longer pin a broken image in a
  visitor's browser cache (#394)
- `?w=` can narrow the image tier instead of being ignored, and the tier
  is part of the ETag so the three sizes cache separately (#394)
- IMAGE_CACHE_VERSION as an escape hatch for stale browser caches after
  Immich regenerates a thumbnail (#394)
- Every rate-limited response carries Retry-After; a warning fires when
  TRUSTED_PROXY_HOPS cannot identify a client (#394)
- Admin saves that would produce an unloadable gallery.yaml are rejected
  before the write rather than reported as successful (#394)
- middleware.ts migrated to the Next 16 proxy convention (#394)
- The admin password comparison no longer leaks the password length
  through timing (#395)
- next 16.2.12, react 19.2.8, js-yaml 4.3.1, @playwright/test 1.62.1,
  and three GitHub Actions majors

Co-authored-by: ralksta <ralksta@users.noreply.github.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "immich-lightbox",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "immich-lightbox",
-      "version": "0.9.1",
+      "version": "0.9.2",
       "license": "MIT",
       "dependencies": {
         "@dnd-kit/core": "^6.3.1",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "immich-lightbox",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "license": "MIT",
   "scripts": {
     "dev": "next dev",