- Rebuild the return-to-host whitelist from the CN/US top charts plus Apple
system apps; drop the canOpenURL pre-check (LSApplicationQueriesSchemes
is capped at 50) and let open() report failure.
- Never record an OSG bundle id as the host to return to.
- DEBUG only: probe the host bundle id through the keyboard arbiter
callback and surface the log on a Home test card. Release builds keep
the previous behaviour (no host identification).
Introduce optional Apple account-backed credits with scoped gateway access while preserving local and BYOK paths. Refresh assistant behavior, tests, privacy disclosures, docs, and the website for the 2.0 experience.