release: bump 0.8.4 -> 0.8.5 (#258)

Version bump `0.8.4` → `0.8.5`.

### Fixed
- The R binding's golden-fixture parity test now skips gracefully when the shared `testdata/golden` fixtures are not bundled with the package — standalone r-universe / CRAN builds package only `bindings/r`, so the repo-root fixtures are unreachable there (this was failing the r-universe build of 0.8.4). The parity stays enforced by the repository CI, where the fixtures are present. (#257)

Bump touches the manual release touchpoints only (`Cargo.toml`/`Cargo.lock`, Python/Node/Java/C#/R manifests, lockfiles, `SECURITY.md`, `CHANGELOG.md`). docs/webpage version strings are left to `sync-about.yml` on the tag.

bindings/node/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wickra",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "description": "Streaming-first technical indicators: incremental, fast, install-free. Node bindings powered by Rust.",
   "author": "kingchenc <support@wickra.org>",
   "main": "index.js",
@@ -47,12 +47,12 @@
     "node": ">= 18"
   },
   "optionalDependencies": {
-    "wickra-linux-x64-gnu": "0.8.4",
-    "wickra-linux-arm64-gnu": "0.8.4",
-    "wickra-darwin-x64": "0.8.4",
-    "wickra-darwin-arm64": "0.8.4",
-    "wickra-win32-x64-msvc": "0.8.4",
-    "wickra-win32-arm64-msvc": "0.8.4"
+    "wickra-linux-x64-gnu": "0.8.5",
+    "wickra-linux-arm64-gnu": "0.8.5",
+    "wickra-darwin-x64": "0.8.5",
+    "wickra-darwin-arm64": "0.8.5",
+    "wickra-win32-x64-msvc": "0.8.5",
+    "wickra-win32-arm64-msvc": "0.8.5"
   },
   "scripts": {
     "build": "napi build --platform --release",