Harden startup, device discovery, and macOS release validation

[hideouts-io]

Summary

• keep the desktop UI independent of MobileBackup2 transport imports
• drain final QProcess output so fast usbmux discovery results reach the device picker
• add privacy-safe connection diagnostics and deterministic scanner coverage
• centralize bounded process lifecycle handling for device discovery, Man Pages, and sequential Guided Command Drift
• run the complete 49-route asynchronous drift path in the GUI smoke test
• add contextual per-command readiness with scoped rechecks and remediation
• harden command-drift checks for styled and stderr-based live help
• update pymobiledevice3 to 11.15.1 and verify all 49 guided command routes
• use the minimal PySide6 Essentials dependency and pin the newest validated line with genuine macOS 13 compatibility
• validate the native architecture and deployment target of every Mach-O in each frozen app
• resolve packaged internal workers through the actual CFBundleExecutable instead of an unreliable frozen sys.executable path
• preserve the operating-system error for failed finite-process launches
• align v0.3.4 metadata and add dual-architecture frozen-app smoke builds for Apple Silicon and Intel
• add the repository/product audit and prioritized roadmap

Validation

• 94 unit/integration tests
• 90-action headless GUI smoke test, including real live-help and the full 49-route asynchronous drift check
• 49/49 guided command live-help routes
• clean Python 3.13 install with PySide6 Essentials 6.9.3
• direct Shiboken load-command verification at macOS 12.0
• negative-path proof that the bundle verifier rejects a macOS 15 dependency
• Python compilation, plist lint, workflow parsing, shell syntax, and diff checks
• successful dual-native frozen bundle verification on GitHub-hosted Apple Silicon and Intel runners before the final controller migration
• final cached dual-native verification running for the complete release candidate

Distribution boundary

The app remains ad-hoc signed and is not Apple-notarized. The macOS 13-compatible frozen artifacts must pass the native GitHub Actions jobs before a v0.3.4 release is created. Physical-device validation remains explicitly separate and is not claimed by source or frozen smoke tests.