[codepilotios]

Summary

• disables Same Network as an iOS public beta setup choice and updates iOS setup docs to point users to Cloudflare
• changes Remote Desktop pairing so the phone proof returns pending_mac_approval and the Mac Approve action is required before trust is persisted
• removes the unused iOS pairing-code field and keeps Start Session disabled until refresh sees an approved pairing
• updates local issue-triage notes and clears obsolete decision escalations

Addresses #2 and #3.

Verification

• swift test
• focused iOS simulator tests for RemoteDesktopTests
• iOS simulator build with code signing disabled
• scripts/privacy-audit.sh

Not run

• OTA build and public OTA asset verification. The current unattended policy prohibits non-GitHub external system mutation, so this needs an allowed release/OTA run before completion.