TokenLink 0.2.2: sessions, BLE reliability, and release artifacts

[phantom5125]

Summary

• ship the v0.2.2 Sessions lifecycle, focus, acknowledgement, status animation, and full active-count improvements
• harden C152 short-click wake and post-flash BLE rebinding with a persistent per-install identity
• apply the TokenLink brand mark to the app, menu bar, and menu panel while preventing duplicate worktree app registration
• produce and verify a Universal 2 drag-to-Applications DMG, with stable-tag release automation that fails closed without Developer ID signing and notarization credentials
• align the app at 0.2.2 build 8 and refresh release/validation documentation

Validation

• bash scripts/test.sh — 190 tests
• Swift format strict lint for Package.swift, Sources, and Tests
• bash scripts/privacy_scan.sh
• firmware package tests and Mac/firmware C01-C04 contract check
• real ESP32-S3 release build plus 13 host-native firmware tests
• firmware artifacts and SHA-256 checksums verified
• Universal 2 TokenLink-0.2.2.dmg built, mounted, and verified with arm64/x86_64 slices, app resources, icon, signature, Applications link, and checksum
• workflow YAML parsed and release shell scripts passed bash syntax checks
• physical C152 flash, protocol-v2 negotiation, rebinding, and repeated Codex/Kimi/MiniMax sync verified

Gates before tagging v0.2.2

• configure the documented GitHub Actions Developer ID and notarization secrets
• complete the final visible single-click sleep/wake check
• complete one real needs-input ACTION to OPENED acceptance check

These final gates block the public tag, not source integration.