[Ankush523]

Summary

• Adds SurfrRoll (apps/surfrroll), a production-style demo for MitKat Advisory / DataSurfr “last mile”: when cell or internet fails, signed incident alerts and employee roll call (safe / help / SOS) still move over Bluetooth mesh, then reconcile to a mock SOC when the cloud link is back.
• SOC console hosts the mesh ledger, toggles cloud link, pulls a mock flood alert, and uploads check-ins with visible duplicate drop on re-sync (checkInId, same pattern as Event Floor / ChargeCatch).
• Staff handsets use a demo roster + PIN, reject alerts that fail signature verification, and propose check-ins with resend while offline from the host.
• Optional mesh relay extends range when only one phone has internet.
• Updates root app catalogue, CI (Android matrix + iOS SurfrRoll scheme), and pnpm-lock.yaml.

Test plan

• pnpm install && pnpm --filter @offline-app-examples/surfrroll test
• pnpm --filter @offline-app-examples/surfrroll typecheck
• Metro: pnpm --filter @offline-app-examples/surfrroll dev; install on 3+ physical phones
• Phone A: SOC console → cloud link ON → Receive flood alert
• Phones B/C: Staff handset (different roster users + PINs) → see Verified alert → I'm safe / Need help / SOS
• SOC: check-ins appear → Upload roll call → presenter strip shows rows; second upload increments dupes dropped
• (Optional) Phone D: Mesh relay between SOC and a distant staff phone; alert and check-ins still flow
• CI: Android assembleDebug and iOS scheme SurfrRoll build on PR

Notes

• Side demos mentioned in the pitch (offline sitrep co-edit, evacuation muster) are documented in the app README as future scope, not implemented in this PR.
• Signing is a deterministic demo stand-in for DataSurfr/OfflineID trust UX, not production cryptography.