release: bump 0.8.4 -> 0.8.5 (#258)

Version bump `0.8.4` → `0.8.5`.

### Fixed
- The R binding's golden-fixture parity test now skips gracefully when the shared `testdata/golden` fixtures are not bundled with the package — standalone r-universe / CRAN builds package only `bindings/r`, so the repo-root fixtures are unreachable there (this was failing the r-universe build of 0.8.4). The parity stays enforced by the repository CI, where the fixtures are present. (#257)

Bump touches the manual release touchpoints only (`Cargo.toml`/`Cargo.lock`, Python/Node/Java/C#/R manifests, lockfiles, `SECURITY.md`, `CHANGELOG.md`). docs/webpage version strings are left to `sync-about.yml` on the tag.

examples/node/package-lock.json

@@ -17,7 +17,7 @@
     },
     "../../bindings/node": {
       "name": "wickra",
-      "version": "0.8.4",
+      "version": "0.8.5",
       "license": "MIT OR Apache-2.0",
       "devDependencies": {
         "@napi-rs/cli": "^2.18.0"
@@ -26,12 +26,12 @@
         "node": ">= 18"
       },
       "optionalDependencies": {
-        "wickra-darwin-arm64": "0.8.4",
-        "wickra-darwin-x64": "0.8.4",
-        "wickra-linux-arm64-gnu": "0.8.4",
-        "wickra-linux-x64-gnu": "0.8.4",
-        "wickra-win32-arm64-msvc": "0.8.4",
-        "wickra-win32-x64-msvc": "0.8.4"
+        "wickra-darwin-arm64": "0.8.5",
+        "wickra-darwin-x64": "0.8.5",
+        "wickra-linux-arm64-gnu": "0.8.5",
+        "wickra-linux-x64-gnu": "0.8.5",
+        "wickra-win32-arm64-msvc": "0.8.5",
+        "wickra-win32-x64-msvc": "0.8.5"
       }
     },
     "node_modules/wickra": {