d4ebdbf6a9
- Add `fonts download` and `fonts verify` subcommands - Implement Rust-based downloader (ureq + tar + flate2) with pinned sources - Verify SHA-256 for Liberation and Noto Sans TTFs for reproducibility - Keep binary behind `build-bin` feature; library build unaffected