chore: release v1.9.49 — roadmap drain pass

Bumped version to v1.9.49 (code 2098). This release ships:
- P0: backup/transfer privacy copy fix + CI guard
- P1: OSV release severity gate with override mechanism
- P2: plural quantity resources, fork-identity fix, file diagnostics,
  developer verification gate, stylus handwriting wiring, reproducible
  docs refresh, addon/Tasker namespace alignment, FOSS catalog PRs
- P3: runBlocking constraint guard, stringRes normalize, archive docs

Author: SysAdminDoc

README.md

@@ -1,6 +1,6 @@
 # SwiftFloris
 
-![Version](https://img.shields.io/badge/version-v1.9.48-blue) ![License](https://img.shields.io/badge/license-Apache%202.0-green) ![Platform](https://img.shields.io/badge/platform-Android%208.0+-orange) ![Network](https://img.shields.io/badge/network-none-lightgrey) ![Dictionary imports](https://img.shields.io/badge/dictionary%20imports-local%20files-green)
+![Version](https://img.shields.io/badge/version-v1.9.49-blue) ![License](https://img.shields.io/badge/license-Apache%202.0-green) ![Platform](https://img.shields.io/badge/platform-Android%208.0+-orange) ![Network](https://img.shields.io/badge/network-none-lightgrey) ![Dictionary imports](https://img.shields.io/badge/dictionary%20imports-local%20files-green)
 
 **SwiftFloris** is a privacy-first Android keyboard, forked from FlorisBoard and pushed toward SwiftKey-class multilingual typing without the cloud. It ships under Apache-2.0, holds no `INTERNET` permission, and binds zero accounts.
 
@@ -37,7 +37,7 @@
 
 ## Highlights
 
-| Area | What's in v1.9.48 | Privacy posture |
+| Area | What's in v1.9.49 | Privacy posture |
 |------|-------------------|-----------------|
 | **Autocorrect / prediction** | SCOWL 117k English dictionary, heap-bounded SymSpell d1+d2, bigram + trigram next-word, capitalization-aware completions, contraction handling, instant-remember user-dictionary overlay | On-device |
 | **Multilingual typing** | Bilingual subtype presets (EN+ES / EN+FR / EN+DE), per-token Latin language identification, top-two straddle guard, sentence-local context scoring, opt-in remembered keyboard language per app, and stale-id-safe manual subtype switching | On-device |

fastlane/metadata/android/en-US/changelogs/2098.txt

@@ -0,0 +1,10 @@
+• Fixed stale backup/transfer privacy copy — README and PRIVACY_AND_AI.md now correctly state that personal dictionary is excluded from both cloud backup and device-to-device transfer, with a new CI guard to prevent wording drift.
+• Releases now block on HIGH/CRITICAL OSV advisories — the release workflow gates on severity with a documented override mechanism (.github/osv-overrides.json).
+• Converted six "(s)" plural strings to proper Android quantity resources.
+• Renamed rootProject.name from "FlorisBoard" to "SwiftFloris" for F-Droid reviewer clarity.
+• Wired Android 14+ stylus handwriting through the recognizer facade — ink capture, stroke forwarding, and candidate commit now work when a recognizer addon is installed.
+• Implemented bounded file-backed diagnostic logging (3-file rotation, 512 KB each, PII-safe).
+• Added developer verification readiness gate to the release checklist.
+• Refreshed reproducible-build docs to match v1.9.49 toolchain pins.
+• Aligned addon spec and Tasker docs with current SwiftFloris contract namespaces.
+• Submitted to awesome-privacy, android-foss, and foss-apps catalogs.

gradle.properties

@@ -15,5 +15,5 @@ projectMinSdk=26
 projectTargetSdk=36
 projectCompileSdk=36
 
-projectVersionCode=2097
-projectVersionName=1.9.48
+projectVersionCode=2098
+projectVersionName=1.9.49