TokenLink v0.3.0: local usage analytics

[phantom5125]

Summary

• add project, model, reasoning-effort, and privacy-safe Session attribution
• add GitHub-style activity calendar, time series, hourly distribution, and prior-period comparison
• add estimated active time, custom 400-day date ranges, and API-equivalent pricing coverage
• add bounded local incremental history with changed-file reparsing and unchanged-file reuse
• version Mac and matching C152 release metadata as 0.3.0

Privacy and data semantics

• stores normalized counters and hashed identifiers only
• never persists prompts, replies, tool output, full paths, raw Session IDs, or raw Claude message IDs
• labels active time and API-equivalent cost as estimates and exposes pricing coverage

Verification

• 271 Swift tests passed; the one timing test that flaked under concurrent Universal 2 compilation passed alone and in the serial full rerun
• Swift format strict lint passed
• privacy scan passed
• resource budget passed: about 9.3s, 94MB RSS, 7.8MB release executable
• Universal 2 TokenLink-0.3.0.dmg built, mounted, code-signature checked, and checksum verified
• C152 firmware build/simulator/contract tests and release checksums passed

Review and release boundary

This is a stacked PR on the v0.2.3 candidate so the diff contains only v0.3.0 work. Keep it open for review; do not merge. The matching v0.3.0-rc.1 GitHub prerelease will be tagged from this branch after CI is green.

[phantom5125]

v0.3.0-rc.2 blocker fixes are now on commit 0447072: canonical assets/branding icons, standard Contents/Resources SwiftPM loading with a mounted-DMG cold-start gate, and non-blocking C04 onboarding plus one-time firmware bond migration. Local gates passed: 271 Swift tests; strict format; privacy/resource checks; Universal 2 DMG mount/signature/icon/cold-start; C152 PlatformIO + simulator tests; firmware contract, packaging, and checksums. The branch remains unmerged.