Release T4 Code 0.1.28 with fast startup and restored phone access

[wolfiesch]

Changes

• Release T4 Code 0.1.28 with OMP t4code-17.0.5-appserver-6 at 25295f6f2e03033cb545c513f476e7e51532524c.
• Pin the independently verified Apple Silicon artifact: 120,777,424 bytes, SHA-256 0ab83485470562edbad3f7d828f31c6ce8ac6c19e28767d66a74e1a7b8d46877.
• Document lazy session indexing, restored QR phone access, the no-install browser demo, and the polished left rail in one release contract.
• Keep package versions, download URLs, provenance, desktop/runtime tests, and release notes aligned.

Verification

• OMP PR Keep deferred site runs successful #14 merged with all required checks green and no unresolved review threads.
• OMP release run 29687231316 passed, published five exact assets, and verified the downloaded macOS binary.
• Real 831-session Mac profile: initial index 59.2s -> 4.0s; full transcripts remain on demand.
• Independent artifact SHA-256, omp/17.0.5, and --smoke-test verification.
• pnpm check under Node 24.13.1.
• pnpm test (1,580 tests).
• Web and desktop production builds plus packaging tests (31 tests).
• Focused release/site checks (28 tests).

[Copilot]

Pull request overview

This PR prepares the T4 Code v0.1.28 release by updating the pinned OMP runtime provenance/artifact hash and ensuring all user-facing release references (README, site release contract, release notes, tests, and compatibility matrix) are consistent.

Changes:

• Bump the workspace and client-facing version references from 0.1.27 → 0.1.28 across packages, apps, and protocol fixtures.
• Update the pinned OMP runtime provenance to t4code-17.0.5-appserver-6 at commit 25295f6f…, including the macOS arm64 artifact SHA-256.
• Refresh release documentation and guards (README, CURRENT_RELEASE_NOTES, site release contract tests, release consistency tests, and e2e assertions) to match the new release.

Reviewed changes

Copilot reviewed 27 out of 27 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
SECURITY.md	Updates the notarized macOS build reference to v0.1.28.
scripts/check-release-consistency.test.mjs	Adjusts release-consistency regression tests for v0.1.28 + updated runtime tag.
README.md	Updates download links, requirements, and “What changed” section for v0.1.28.
packages/ui/package.json	Bumps package version to 0.1.28.
packages/service-manager/package.json	Bumps package version to 0.1.28.
packages/remote/package.json	Bumps package version to 0.1.28.
packages/protocol/test/fixtures/platform-boundaries.ts	Updates protocol fixtures to report latestVersion 0.1.28.
packages/protocol/package.json	Bumps package version to 0.1.28.
packages/fixture-server/package.json	Bumps package version to 0.1.28.
packages/client/src/omp-client-frames.ts	Updates client hello payload version to 0.1.28.
packages/client/package.json	Bumps package version to 0.1.28.
package.json	Bumps workspace root version to 0.1.28.
e2e/site-mobile-docs.spec.ts	Updates e2e expectation for the Android APK release URL to v0.1.28.
docs/CURRENT_RELEASE_NOTES.md	Adds v0.1.28 release notes and refreshes runtime provenance references.
compat/omp-app-matrix.json	Updates verified/published runtime commit/tag + macOS arm64 artifact SHA; adds lazy-session-transcript-indexing feature.
apps/web/src/platform/browser-shell-port.ts	Updates the web client version string to 0.1.28.
apps/web/package.json	Bumps app version to 0.1.28.
apps/site/test/release.test.ts	Updates site release-contract tests (asset names, tag/version, runtime tag/commit).
apps/site/src/release.ts	Updates the site’s single-source-of-truth release contract constants and asset list for v0.1.28.
apps/site/package.json	Bumps app version to 0.1.28.
apps/mobile/package.json	Bumps app version to 0.1.28.
apps/mobile/capacitor.config.json	Updates appended mobile user agent version to 0.1.28.
apps/desktop/test/doctor.test.ts	Updates desktop doctor test expectations for the new runtime tag/URL.
apps/desktop/test/bundled-runtime.test.ts	Updates bundled runtime manifest expectations for the new runtime tag.
apps/desktop/src/target-manager.ts	Updates desktop client version string to 0.1.28.
apps/desktop/package.json	Bumps app version to 0.1.28.
.github/ISSUE_TEMPLATE/bug_report.yml	Updates the bug report template placeholder version to 0.1.28.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.