chore(release): 0.1.2, and default the ASC account identifiers (#162)

Bumps versionName and MARKETING_VERSION from 0.1.1 to 0.1.2 across the
Android, iOS, and macOS projects. All three ship one version string.

Also defaults ASC_KEY_ID and ASC_ISSUER_ID in scripts/lib/asc-key.sh, the
helper both release scripts already source. These are IDENTIFIERS, not
credentials: App Store Connect API requests are authenticated by a JWT
signed with the AuthKey_<ID>.p8 private key, which stays outside the
checkout and is never committed. Knowing the ids without that key grants
nothing.

The point is that a local release now needs only the .p8 in place instead
of three exported variables — the previous arrangement fails at the upload
step, after a long successful-looking build. The environment still wins,
so CI (which supplies them as repository secrets) and anyone releasing
from a different ASC account are unaffected.

Verified: scripts/test-asc-key-install.sh passes; with the three variables
unset the defaults resolve, and with ASC_KEY_ID exported the override wins.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

feat(core,ffi): identity handles, FFI logging init, newswire share pl…

…umbing (#149)

* feat(core,ffi): identity handles, FFI logging init, newswire share plumbing

Rescued uncommitted in-flight work from the shared main checkout:

- riot-core: Earthstar-style self-certifying identity handles
  (@author./+share. base32 full-key suffix) in identity.rs + tests
- riot-ffi: process-wide tracing subscriber (init_logging, os_log on
  Apple targets, stderr fallback elsewhere) + logging_init tests
- newswire share + site ticket URL extensions with contract tests
- community_registry / mobile_api / mobile_state sync-tracing seams
- iOS/macOS shells wire init_logging at launch; SyncCoordinator spans
- specs: coordinate-ledger design, relay community directory; research
  docs on DIDs/findable identity and prosocial local spaces

Test story: not run this session — rescued as-found. CI is the gate.

* fix(ffi): keep net deps in [dependencies]; refresh Cargo.lock

The Apple-only tracing-oslog target table landed in the MIDDLE of
[dependencies], so the optional net deps below it (riot-transport,
riot-anchor-protocol, tokio, iroh) parsed as Apple-only. macOS builds
were unaffected, but Linux CI with --all-features lost riot_transport
(E0433) and the stale lock failed the Android bindings step (--locked).
Also commits the Cargo.lock refresh for the tracing pins.

* fix(ffi): silence Linux clippy in logging shim

- SubscriberInitExt import was unused (set_global_default needs no
  extension trait)
- SUBSYSTEM is only referenced by the Apple cfg-gated OsLogger path;
  gate the const the same way so -D warnings passes on Linux CI

* chore(fixtures): re-pin cargo_lock_sha256 after tracing deps

The tracing/tracing-subscriber/tracing-oslog workspace pins re-hashed
Cargo.lock; the contract fixture records its sha256. Updated to the
post-change lock bytes. Verified: xtask validate-contracts PASS.

feat(marketing): refresh homepage iPhone screenshots to the current a…

…pp UI (#125)

The homepage hero device shots showed the old Spaces/Apps/Board/Compose/Connect
nav. The app now uses a Home/Tools/People/Nearby tab bar, so the pinned iPhone
screenshots were stale. Recapture them from the current build's Riverside demo
space (real content, current nav), 1206x2622 to match the existing slots:

- spaces.png    <- Home: "What's happening" + the community's tools
- apps.png      <- Tools: organizer-approved community tools (Shift Signup, Chat)
- compose.png   <- Post an update: typed Update/Alert/Request compose
- checklist.png <- Nearby: syncing River City Wire over Bluetooth/local network
  (alt text updated to match; the old "shared checklist" image no longer exists)

Source and public mirrors stay byte-identical; the marketing contract gate and
9 marketing tests pass. The desktop app-*.png gallery (1362x1870) is a separate
macOS set and is unchanged here.

Captured via a new, repeatable RiotUITests/testCaptureMarketingScreens: it
onboards, loads the Riverside demo, and snapshots each surface as a keep-always
attachment for export from the result bundle.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>