v1.8.4

<!-- Release notes generated using configuration in .github/release.yml at v1.8.4 -->

## What's Changed
### New Features 🎉
* feat(studio): refresh device preview UI and stabilize MJPEG previews by @quanru in https://github.com/web-infra-dev/midscene/pull/2493
* feat(ios): support external WDA sessions by @quanru in https://github.com/web-infra-dev/midscene/pull/2511
### Bug Fixes 🐞
* fix(playground-app): correct tap projection in iOS / Harmony / Computer playgrounds by @quanru in https://github.com/web-infra-dev/midscene/pull/2481
* fix(web-integration): wait for new tab navigation before bridge attach by @quanru in https://github.com/web-infra-dev/midscene/pull/2492
* fix(harmony): respect per-call autoDismissKeyboard for input by @EAGzzyCSL in https://github.com/web-infra-dev/midscene/pull/2503
* fix(core): avoid initial aiAct completion before actions by @EAGzzyCSL in https://github.com/web-infra-dev/midscene/pull/2504
### Other Changes
* chore(security): replace issues helper action by @chenjiahan in https://github.com/web-infra-dev/midscene/pull/2494
* update scripts by @EAGzzyCSL in https://github.com/web-infra-dev/midscene/pull/2495
* fix(workflow): pin third-party actions to commit SHAs by @quanru in https://github.com/web-infra-dev/midscene/pull/2500
* feat(studio): ship a drag-to-Applications DMG installer by @quanru in https://github.com/web-infra-dev/midscene/pull/2498
* chore(workflow): publish via npm Trusted Publishers + provenance by @quanru in https://github.com/web-infra-dev/midscene/pull/2510
* ci(workflow): enforce frozen lockfile in lint by @EAGzzyCSL in https://github.com/web-infra-dev/midscene/pull/2496
* chore(test): click player setting icon with deepLocate by @EAGzzyCSL in https://github.com/web-infra-dev/midscene/pull/2506


**Full Changelog**: https://github.com/web-infra-dev/midscene/compare/v1.8.3...v1.8.4