Keep Linux runtime libraries out of Git and record native Debian preparation

.gitignore

@@ -24,3 +24,5 @@ __pycache__/
 
 /apps/desktop/src-tauri/resources/searchi-extract-worker*
 /apps/desktop/src-tauri/resources/extraction-worker.json
+
+/apps/desktop/src-tauri/resources/*.so*

docs/LINUX-DESKTOP.md

@@ -42,3 +42,17 @@ not suit WSL and then because resources used the Cargo name instead of product
 name. Those were test-layout corrections; the final normal-discovery run passed.
 Raw ignored report: `.searchi/qa/linux-desktop-startup-013.json`, SHA-256
 `23bfebbd916e1d1e051efd58c5286b193b15014ebfcbaa621e6a5c650338bba5`.
+
+## Debian package preparation
+
+The official Tauri CLI 2.12.2 native tool was fetched from its upstream release
+and verified against GitHub's published SHA-256
+`35c7b50266256cb6d5f757608d7097a59a5faeb0c75879ee1f504652a9b6087e`.
+Tauri generated a Debian package from the existing release binary. A first
+candidate accidentally included build-cache files from the validation snapshot
+and was never published. A fresh source snapshot now uses the existing verified
+resource stager, yielding 33 resource files instead of copying a CMake build tree.
+Linux staged `.so` files are excluded from Git like Windows DLLs.
+
+Final package compression, extracted payload/ABI checks and startup validation
+are in progress. No desktop Debian download is published yet.