Prepare v1.0.0-rc.6

[JacobLinCool]

Summary

Prepare the directly distributed Android app for v1.0.0-rc.6.

• require notification access for every study and present owner-preserving, app-authored setup guidance for collector access
• harden access, foreground-host, WorkManager, duration, storage, and process-recovery boundaries with typed fail-closed handling
• preserve rc.5 package/signing continuity and pin the production signer certificate in the release workflow
• synchronize protocol consumers, release notes, participant/researcher documentation, and Traditional Chinese strings
• keep the release path APK-only; no Play track or AAB is introduced

Why

Internal testing needs an updateable signed APK whose permission setup is understandable and whose collection state cannot silently remain or recover as RUNNING after an unacknowledged safety-critical operation.

Validation

• full Gradle release gate: 1455/1455 tasks
• fresh JVM tests: 312/312
• API 34 connected tests: 38/38
• debug and release lint: 0 errors
• protocol, catalog, collector assurance, Python, TypeScript, web, and receiver suites pass
• real WorkManager/Room enqueue acknowledgement and worker self-cancel instrumentation pass
• signed rc.5 → rc.6 install-over test retains first-install identity, notification permission, and Keystore-encrypted active study state
• staged scope, secret scan, actionlint, release metadata, and git diff checks pass

[changeset-bot]

⚠️ No Changeset found

Latest commit: ee09a0e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR