feat(sacd): support raw and DST-compressed ISO playback

Parse resilient SACD images, decode DST, scan ISO releases into the local library, and keep explicit opens ephemeral.

Ship decoder notices across distribution formats and align DSD album filtering and version selection.

cx

licenses/dst-decoder-NOTICE.md

@@ -0,0 +1,11 @@
+# dst-decoder 0.1.2 notice
+
+QBZ uses `dst-decoder` 0.1.2 solely to decode MPEG-4 Direct Stream Transfer
+(DST) audio. The Rust crate declares Apache License 2.0; its license text is at
+<https://github.com/bleggett/dst-decoder/blob/main/LICENSE>.
+
+The upstream project states that it is based heavily on the MPEG-4 DST
+reference implementation. QBZ therefore bundles both
+`Apache-2.0-dst-decoder.txt` and the exact upstream provenance/copyright text
+in `dst-decoder-upstream-NOTICE.txt`; neither depends on a live URL at install
+time.