feat: release GF2logger 2.3.0

[1window2]

Summary

• add a bilingual, five-step onboarding shown once, with Skip and a sliding English/한국어 selector
• add System, Light, and Dark appearance settings and replace the interim UI with a compact warm-neutral design system
• distinguish capture, stop, platoon-management, and weekly-report actions while retaining accessible 48 dp touch targets
• align weekly cutoff controls, simplify evidence and packet/member surfaces, and make onboarding resilient to locale-driven activity recreation
• preserve upgraded v2.2.0 settings while keeping onboarding exclusive to genuinely fresh installs
• declare Kotlin Gradle Plugin 2.4.20-Beta1 directly so AGP 9.3.1 no longer resolves the vulnerable transitive 2.2.10 build plugin
• remove unsafe non-null assertions from CSV snapshot parsing and capture recovery, and document the UI/application boundary
• update architecture docs, README files, changelog, and version metadata for v2.3.0

Root cause

Dependabot detected org.jetbrains.kotlin:kotlin-gradle-plugin:2.2.10 in Gradle's resolved build classpath, but it was introduced only transitively by Android Gradle Plugin 9.3.1. Because no repository manifest declared that artifact, Dependabot could report the graph edge but could not open an automatic manifest edit. The root build now declares the patched plugin directly and supplies its own Maven Central repository, giving Gradle and Dependabot an explicit, cleanly resolvable root constraint.

The earlier visual pass also treated too many controls as equally prominent and allowed Android's default button state to reappear after locale recreation. The final design uses centralized semantic roles, warm off-white/soft charcoal surfaces, restrained orange identity accents, direct state-list drawables, and API-specific navigation-bar theme resources.

Validation

• resolved buildEnvironment: KGP 2.2.10 -> 2.4.20-Beta1
• protocol and app unit tests
• Android lint and debug/release builds
• 39/39 connected instrumentation tests on SM-N976N, including fresh-install and unified-v1 settings migration coverage
• signed APK v2/v3 verification and permanent signer fingerprint check
• first-launch, Skip, completion, English/Korean persistence, and System/Light/Dark device checks
• exact final-APK visual checks for Main, Settings, onboarding, weekly report, evidence guide, and aligned cutoff settings
• in-place signed update retained sampled packet history and the populated weekly table without reopening onboarding
• repository review confirmed no raw UI color literals in Kotlin/Java, no activity-owned SQL, matched executor shutdown paths, and no remaining non-null assertions in app/protocol production sources

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 26261adf4e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[1window2]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d103cba05a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[1window2]

@codex review

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.