build(deps): prune dead catalog entries and bump dependencies

[jamesarich]

Summary

Audits gradle/libs.versions.toml, removes dependency entries left dead by the migration to the published org.meshtastic:protobufs SDK, and applies the safe version bumps (folding in several Renovate-proposed updates so those PRs become redundant).

Type of change

• Infrastructure / CI / build

Related issue / discussion

Supersedes / makes redundant Renovate PRs #21 (composeMultiplatform), #15 (kable), #11 (axionRelease), #14 (Develocity), and the queued gradle-9.x, kotlinx, spotless, detektcomposerules updates. Renders #16 (mockk) and the protobuf update moot — those dependencies are deleted here.

What changed

Removed (zero references in any build script or source file):

• protobuf / protobufKotlin — proto types now come from the protobufs SDK via Wire; no com.google.protobuf usage remains
• mockk (version + library) — no test references it
• ktorNetworkTls library — unused (the ktor version is retained for ktorNetwork)
• kotlinxSerialization + kotlinxSerializationCore + the kotlinSerialization plugin — no @Serializable anywhere; the applied plugin was a no-op
• bundles sqldelightDrivers, testCommon — their members are referenced individually in the convention plugins

Bumps:

Dependency	From → To
kotlinxDatetime	0.7.1 → 0.8.0
atomicfu	0.32.1 → 0.33.0
kable	0.43.0 → 0.43.1
composeMultiplatform	1.10.3 → 1.11.1
spotless	8.4.0 → 8.6.0
detektComposeRules	0.5.8 → 0.6.1
axionRelease	1.21.1 → 1.21.2
Develocity plugin	4.4.1 → 4.4.2 (both settings files)
Gradle wrapper	9.4.1 → 9.5.1 (checksum-verified)

Deliberately held back: kotlin 2.4.0 (pinned to SKIE 0.10.12 / Meshtastic-Android parity), detekt 2.0.0-alpha.4 (prerelease).

Affirmations

• All commits are signed off (DCO).
• No public API change — the kotlinx.serialization removal touches no exported types, so updateKotlinAbi is not required.
• No wire-behavior change.
• ./gradlew check — ran a representative subset locally (see below); full check left to CI.

How was this verified?

./gradlew :core:jvmTest :core:compileKotlinJvm spotlessCheck detekt passes on the upgraded Gradle 9.5.1 (clean run). The kotlinxDatetime 0.7→0.8 bump is safe because the codebase has zero kotlinx.datetime imports — all time code uses stdlib kotlin.time.Instant/Clock.

Notes for reviewers

• The kotlinxDatetime 0.7→0.8 minor bump carries API changes upstream, but none are reachable here (no kotlinx.datetime imports). kotlinxDatetime itself is arguably now unused (wired in the convention plugin but never imported) — left in scope-minimal for this PR; flag if you'd like it removed too.
• GitHub Actions workflow bumps (Renovate chore(deps): update dependency node to v20.20.2 - autoclosed #22/chore(deps): update actions/setup-java action to v4.8.0 - autoclosed #20/chore(deps): update actions/dependency-review-action action to v4.9.0 - autoclosed #19/chore(deps): update actions/checkout action to v4.3.1 - autoclosed #18/chore(deps): update actions/cache action to v4.3.0 - autoclosed #17/chore(deps): update gradle/actions action to v4.4.4 - autoclosed #13) were intentionally left as their own Renovate PRs — different file domain (SHA-pinned .github/**).