chore(release): v3.3.0

[tinpotnick]

Release 3.3.0

Version bump only (package.json + package-lock.json, 3.2.6 → 3.3.0). No code changes.

Bundles the RTCP + DTLS work landed since 3.2.6:

• feat(rtcp): Tier 1 RTCP (RFC 3550) over the separate P+1 port #162 Tier 1 RTCP (RFC 3550) over the P+1 control port
• feat(rtcp): Tier 2 — SRTCP + randomised timing + BYE + rtcp-mux #163 Tier 2 — SRTCP + randomised report timing + BYE + rtcp-mux
• feat(dtls): verify peer certificate fingerprint (RFC 5763) + no-downgrade gate #164 DTLS peer-certificate fingerprint verification (RFC 5763) + no-downgrade gate
• fix(rtcp): re-latch RxStats on a mid-call SSRC change #165 re-latch RTCP receiver accounting on a mid-call SSRC change
• test: loosen timing-fragile packet-count windows for release/full-load runs #166 test-robustness: loosen timing-fragile packet-count windows

Full release-build interface suite: 150 passing / 6 pending / 0 failing; cargo test --lib green; clippy + rustfmt clean.

After merge (finishes the release)

git checkout main && git pull
git tag v3.3.0 && git push origin v3.3.0   # triggers the multi-arch (amd64+arm64) Docker build
npm publish

Tag is created post-merge because the repo squash-merges (an npm version tag on this branch would be orphaned).

🤖 Generated with Claude Code