chore(deps): re-point microLXMF pin to merge commit df1b01a

PR #10 merged to main; swap the temporary branch-head pin (59ca70a) for
the merge commit so the consumer tracks a stable main revision. Update
the release-audit allowlist in the same commit. Firmware source is
byte-identical to 59ca70a (the merge added only the CI workflow commit).

platformio.ini

@@ -117,13 +117,12 @@ lib_deps =
     ; 60fb7d6: merged non-evicting guarded outbound admission,
     ; persist-only-after-preparation semantics, and serialized native bridge
     ; transport callbacks/conformance closure from microLXMF PR #9.
-    ; 59ca70a (feat/conversation-last-message-accessors, microLXMF PR #10):
+    ; df1b01a (merged feat/conversation-last-message-accessors, microLXMF PR #10):
     ; O(1) per-conversation get_last_message_hash + get_conversation_unread_count
     ; — the conversation list reads the newest hash from the index tail
     ; instead of copying the full 8KB hash array, and renders the real
-    ; persisted unread badge. TEMPORARY branch-head pin: re-point to the
-    ; merge commit on main after PR #10 merges.
-    https://github.com/torlando-tech/microLXMF.git#59ca70a34abd5419f3e181d69e2262817e2548e7
+    ; persisted unread badge.
+    https://github.com/torlando-tech/microLXMF.git#df1b01a21c27b11b2cbd1674c7f8b648b76345ae
     lvgl/lvgl@8.4.0
     bblanchon/ArduinoJson@^7.4.2
     hideakitai/MsgPack@^0.4.2

tools/audit_release_build.py

@@ -46,7 +46,7 @@ EXCLUDED_SYMBOLS = (
 )
 PINNED_DEPENDENCIES = {
     "microReticulum": "cd0338e7fc07d3a7785a450656ba766491cbf6e8",
-    "microLXMF": "59ca70a34abd5419f3e181d69e2262817e2548e7",
+    "microLXMF": "df1b01a21c27b11b2cbd1674c7f8b648b76345ae",
     "microStore": "2762f7606800ffb23f4a593947d4f58e259cda7a",
 }