build: bump obscura to v0.2.3-ri.1 for a linkable linux x86_64 .rcx

The previous tag's deno_core 0.350 pulled v8 137, whose prebuilt static
library uses local-exec TLS — a relocation (R_X86_64_TPOFF32) the linker
refuses inside a shared object, so the linux x86_64 leg of the release
matrix could not link while the other three platforms shipped fine. v8 150
builds with shared-library-safe TLS (denoland/rusty_v8 #1911/#2008), and
upstream obscura moved to deno_core 0.412 / v8 150.4 in its 20260919 v8
security bump, so the new fork tag is that upstream merged over the RI fix
set rather than a cherry-pick.

Author: alexskinner

Cargo.toml

@@ -14,16 +14,16 @@ rustcfml-module = { path = "../RustCFML/crates/rustcfml-module" }
 # needs are still open upstream, and building against stock obscura gives you a
 # broken flex layout, so the fork carries upstream plus those fixes rather than
 # this repo waiting on a merge. No sibling checkout is required any more.
-obscura-dom     = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.2-ri.1" }
-obscura-net     = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.2-ri.1" }
-obscura-js      = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.2-ri.1" }
-obscura-browser = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.2-ri.1", features = ["render"] }
-obscura-render  = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.2-ri.1", features = ["paint"] }
+obscura-dom     = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.3-ri.1" }
+obscura-net     = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.3-ri.1" }
+obscura-js      = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.3-ri.1" }
+obscura-browser = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.3-ri.1", features = ["render"] }
+obscura-render  = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.3-ri.1", features = ["paint"] }
 # "render" is not optional in practice: without it the CDP server answers
 # Page.captureScreenshot, Page.printToPDF and the whole screencast domain with
 # "requires a build with the render feature". An agent connecting to us would
 # find it could drive the page but never see it.
-obscura-cdp     = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.2-ri.1", features = ["render"] }
+obscura-cdp     = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.3-ri.1", features = ["render"] }
 
 tokio       = { version = "1", features = ["rt", "sync", "time", "macros"] }
 serde_json  = "1"
@@ -55,5 +55,5 @@ panic = "unwind"
 # ignored, so the top-level crate has to repeat obscura's -- from the same
 # fork, so the patched crates and the crates using them stay in step.
 [patch.crates-io]
-taffy       = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.2-ri.1" }
-cosmic-text = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.2-ri.1" }
+taffy       = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.3-ri.1" }
+cosmic-text = { git = "https://github.com/alexskinner/obscura.git", tag = "v0.2.3-ri.1" }