v1.1.1: diagnostics, slimmer runtime, and shared ADB hardening

[man612]

Summary

This prepares Wirebound v1.1.1 with support diagnostics, a smaller packaged Android runtime, stronger ADB lifecycle handling, and release provenance.

User-facing changes

• adds Run Diagnostics and Copy Report to the dashboard
• diagnostics verify ADB/Gnirehtet runtime presence, ADB response, device authorization, Android/API version, and Gnirehtet client state
• masks device serials in copied support reports
• updates EN/ID copy and documentation for troubleshooting

Runtime and compatibility hardening

• packages only the ADB files Wirebound actually needs, reducing raw runtime size by about 7.9 MB
• uses the standard shared ADB server on port 5037 so Android Studio and other ADB clients remain compatible
• runs the ADB executable from a content-addressed cache under %LOCALAPPDATA%\Wirebound\runtime so a live daemon does not lock files inside the installed app
• serializes ADB readiness across bootstrap, renderer snapshot requests, polling, and engine startup
• starts ADB with a detached nodaemon server process when no server exists, avoiding the Windows/Electron startup ACK-pipe failure reproduced during QA
• stopping Wirebound stops active Gnirehtet Android clients but does not kill the shared ADB server

Release hardening

• adds GitHub artifact attestation for Windows installers
• keeps checksum generation and explicit GitHub Release publishing

Verification

Automated/local:

• npm run lint -- --no-cache ✅
• npm run typecheck ✅
• npm test → 12/12 passed ✅
• npm audit → 0 vulnerabilities ✅
• git diff --check ✅
• npm run package:check ✅
• npm run build:win ✅
• final local installer: wirebound-1.1.1-setup.exe (117,081,334 bytes)

Real-device QA on Moto g45 5G, Android 15 / API 35:

• Gnirehtet 2.5.1 established a real tunnel and produced live DNS/TCP relay traffic ✅
• with an existing ADB 5037 server, Wirebound reused the same server PID without restarting or killing it ✅
• with no ADB server running, Wirebound started ADB from %LOCALAPPDATA%\Wirebound\runtime, detected the phone, started Gnirehtet, and cleaned the Android client on app exit ✅
• rebuilding/package-checking while the cached ADB daemon remained alive succeeded, confirming installed/package runtime files are no longer locked by the daemon ✅

This remains a beta release; broader Android/OEM coverage is still useful after merge.