fix(registry): depend on PyPI coreml-diffusion, set icon, fix license (#64)

* fix(registry): depend on PyPI coreml-diffusion, set icon, fix license

The git+ dependency on coreml-diffusion tripped the registry security
scan (versions flagged unsafe -> Latest pinned to 1.0.1) and broke the
node-extraction sandbox (import failed -> 'No nodes found').

- depend on coreml-diffusion from PyPI (>=0.1.0,<0.2); drop git source
- set the registry Icon to the bundled 512x512 snake.png
- relicense LICENSE file to MIT to match pyproject (was stray GPLv3)
- bump version to 2.1.1 to trigger a fresh registry publish

Note: uv.lock still references the old git source; refresh with
'uv lock' once coreml-diffusion 0.1.0 is live on PyPI.

* chore: refresh lockfile against PyPI coreml-diffusion

pyproject.toml

@@ -1,12 +1,12 @@
 [project]
 name = "comfyui-coremlsuite"
 description = "This extension contains a set of custom nodes for ComfyUI that allow you to use Core ML models in your ComfyUI workflows."
-version = "2.1.0"
+version = "2.1.1"
 license = "MIT"
 requires-python = ">=3.12,<3.13"
 packages = [{ include = "coreml_suite" }]
 dependencies = [
-    "coreml-diffusion",
+    "coreml-diffusion>=0.1.0,<0.2",
     "torch>=2.7,<2.8",
     "coremltools>=9,<10",
     "numpy>=2,<3",
@@ -18,15 +18,10 @@ dependencies = [
 [project.urls]
 Repository = "https://github.com/aszc-dev/ComfyUI-CoreMLSuite"
 
-[tool.uv.sources]
-# Pinned to a published tag so CI can resolve it. Bump the tag when depending on
-# a newer coreml-diffusion release.
-coreml-diffusion = { git = "https://github.com/aszc-dev/coreml-diffusion", tag = "v0.1.0" }
-
 [tool.comfy]
 PublisherId = "aszc-dev"
 DisplayName = "ComfyUI-CoreMLSuite"
-Icon = ""
+Icon = "https://raw.githubusercontent.com/aszc-dev/ComfyUI-CoreMLSuite/main/assets/snake.png"
 requires-comfyui = ">=0.3.27"
 
 [dependency-groups]