[johnfinnerty-nz]

What changed

PrintR now advertises and uses a local HTTPS endpoint with a self-signed certificate pinned from the pairing QR code. Android automatically discovers nearby agents through UDP discovery and a bounded local-network fallback, then securely pairs and loads the available printer list.

Why

This makes the real phone-to-Windows workflow reliable on ordinary home networks while keeping print endpoints protected by the pairing token and certificate pinning.

User impact

• New pairings use HTTPS with certificate pinning.
• The Android app discovers available PrintR Agents automatically and can use them directly from the discovered-computer list.
• The Windows tray app exposes secure pairing details and its TLS fingerprint.
• Documentation, diagnostics, and CI now cover the setup and validation path.

Validation

• dotnet test -c Release (36 passed)
• ./gradlew testDebugUnitTest assembleDebug --no-daemon
• Physical Android device: discovered the running Windows Agent, paired over pinned HTTPS, authenticated, and loaded four printers.
• Packaged Windows ZIP and APK rebuilt successfully.