[codepilotios]

Summary

• add draft TestFlight/App Store metadata, release notes, and a sanitized screenshot checklist
• strengthen the privacy/public-write guards and keep release artifacts covered
• make gateway launchers select only a Python runtime with required TOML support
• add the remote-desktop gateway suite to CI
• record current release blockers, including critical Remote Desktop lease enforcement issue Enforce paired-device leases on every Remote Desktop path #25

Verification

• privacy audit passed
• Swift package tests: 57 passed
• gateway tests: 112 passed
• iOS simulator tests: 37 passed
• unsigned iOS simulator and Release archive compiles passed
• macOS release build passed
• Fastlane Ruby syntax and metadata JSON validation passed
• public-write guard, agent-runner, and scheduler-lock tests passed
• current install-linked OTA manifest and IPA returned HTTP 200

Blocking follow-up

• fix issue Enforce paired-device leases on every Remote Desktop path #25 so capture, input, and signaling require a paired device and active signed lease
• choose and align the canonical iOS bundle identifier before another distribution build
• merge and verify credential-storage hardening and add the app privacy manifest
• run a signed device archive/export and strict App Store Connect validation in an authorized release session
• approve compliance metadata, review details, support/privacy URLs, and sanitized screenshots

No build was uploaded, no OTA build was triggered, and no App Store submission or pricing/legal mutation was performed.