feat(flow): implement ABCD session policy and host return whitelist

- Scheme A: on-demand session start, inactivity-based expiry, handoff auto-recording
- Scheme B: cold-start overlay with swipe guidance and return alert
- Scheme C+D: HostAppURLRegistry (20 apps) and sourceApplication capture
- Settings: skip app switch toggle and inactivity duration picker
- Add LSApplicationQueriesSchemes for canOpenURL checks

Co-authored-by: Rocky <hkgood@users.noreply.github.com>

project.yml

@@ -118,6 +118,28 @@ targets:
           - CFBundleURLName: com.osgkeyboard.ios.settings
             CFBundleURLSchemes:
               - osgkeyboard
+        LSApplicationQueriesSchemes:
+          - weixin
+          - mqq
+          - wxwork
+          - dingtalk
+          - lark
+          - tg
+          - whatsapp
+          - line
+          - fb-messenger
+          - slack
+          - msteams
+          - discord
+          - notion
+          - bear
+          - obsidian
+          - drafts5
+          - googlegmail
+          - ms-outlook
+          - googlechrome
+          - sinaweibo
+          - xhsdiscover
         # All network calls are HTTPS (NSAppTransportSecurity above);
         # nothing in the app uses non-exempt encryption. Declaring
         # `ITSAppUsesNonExemptEncryption: false` lets us skip the