Privacy and store declarations

Makes the app's privacy story true and provable: its own code reaches the network only through the declared seam (or not at all), every SDK that goes online is declared with what it collects, the iOS privacy manifest covers every pod, the App Privacy and Data safety answers come from one checked contract, the release binaries match it, and no key or keystore sits in the repo. Four zero-dependency audits prove it on the source, the shipped JavaScript, the prebuilt pods and the built app.

Rules that must hold