feat: improve feedback, recovery, and release consistency

[ygsgdbd]

Summary

TypeSwitch needs a privacy-conscious feedback path and a release process that keeps the GitHub Release, Sparkle feed, artifact attestation, and Homebrew cask consistent. Automatic input-method switching could also be skipped when an App became active while the input-method catalog was loading or recovering from a failed refresh.

This change:

• retries the real frontmost App after a deferred catalog-dependent activation, including recovery after a failed catalog load;
• adds an in-app version label, help link, copied low-sensitivity diagnostics, and direct GitHub Bug Form entry;
• adds Bug and Feature Issue Forms, a pull-request template, and bilingual changelog entries;
• validates release bundles, checksums, appcast metadata, attestation, latest feed, and Homebrew cask consistency;
• splits publishing, Homebrew synchronization, and distribution verification into recoverable jobs;
• records the remaining review findings in Documentation/CodeReview-2026-08-17.md so they can be resolved before the Draft PR is marked ready.

Review follow-ups before merge

• validate HOMEBREW_TAP_TOKEN and tap push permission before publishing a GitHub Release;
• serialize all release tags that update the shared Homebrew cask;
• include both App language and Locale in copied diagnostics;
• strengthen the Homebrew updater fixture so version, SHA, and URL replacements are each asserted.

Testing

• xcodebuild test: 126 tests passed with 0 failures, including loading/failed catalog compensation and latest-frontmost-App scenarios.
• script/test_release_scripts.sh: exercised release artifact validation, expected-SHA mismatch, latest-appcast mismatch, pending Homebrew synchronization, and idempotent cask updates.
• Existing v0.9.0 release assets passed the new local bundle and appcast validation.

Changelog

Select exactly one:

• Updated both Chinese and English entries under Unreleased in CHANGELOG.md.
• No changelog entry is needed. Reason: N/A

Privacy

• This change does not add telemetry or upload user data. Diagnostics are copied only after an explicit user action and exclude App names, bundle identifiers, paths, rules, input-method lists, and statistics.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.