Update Flea to 0.1.4

[cmyk]

Summary

• update Flea from 0.1.3 to 0.1.4 and refresh the release checksum
• sync the supported architectures, runtime dependencies, and portal files added by the release
• remove the four security backports now contained in the tagged source

Why

Flea 0.1.3 can leave invisible qs and backend processes on hardware where Vulkan cannot initialize. Flea 0.1.4 fixes thisisgm/flea#14 by probing Vulkan before starting Quickshell and selecting OpenGL when the loader cannot provide a usable device.

This was reproduced on a MacBook running Omarchy: 0.1.3 failed with VK_ERROR_INCOMPATIBLE_DRIVER, while the v0.1.4 build reported vkEnumeratePhysicalDevices answered -3, selected OpenGL, and opened a visible window on the active workspace.

Validation

• release archive checksum passed
• package built and packaged successfully with makepkg -f --nodeps; only the local preflight dependency check was bypassed because expect and gvfs-dnssd are not installed on the test machine
• 424 Rust tests passed
• 1,742 QML checks passed
• keymap validation passed
• package payload includes the new portal backend, D-Bus activation file, and GIO authorization helper
• all four removed security patch commits are ancestors of v0.1.4