feat(game): renew moonlit beacon for 4.0.0

[hyochan]

feat(game): renew moonlit beacon for 4.0.0

Moonlit Beacon 4.0.0 keeps the original tap-to-start title and compact menus while adding Firebase guest, Google and Apple accounts. Each player has a durable public ID, account-partitioned progress, an explicit cloud-save conflict choice and a Hall showing character, score and competition rank. Resume restarts the saved gate segment. Starting a new journey asks before deleting that gate save; completed records remain.

All six heroes now move their painted bodies, hands and weapons during primary attacks: Warden follows through on a sword cut, Dancer alternates two separately held fangs, Eclipse turns its scythe through a broad arc, and Keeper, Knight and Sage have distinct recoil and recovery. Idle, walk, attack and recovery keep the same canonical face and head scale. All 24 idle facings have a neutral supported stance, idle breathing moves only the torso, and the title party shares one fit and ground anchor when walking and stopping. The physical motion preserves damage, cadence, projectile counts and sidearm ownership.

The world, guardian states and inner screens use painted artwork. Login buttons use official artwork, left-aligned icons and centered labels; guest entry sits last. Entry loading, delayed Hall responses and audio teardown have lifecycle coverage. Five-language privacy, Terms, support and the 16-lesson course/reference are managed in this monorepo and served by Firebase Hosting at https://moonlitbeacon.hyo.dev, with Vercel DNS and the Pages mirror retained.

Repository PR authorization now follows the user's explicit request: an unrequested PR always requires asking and waiting for the user's answer, while an already requested PR proceeds within that scope without an approval file. The obsolete marker hook and detector are removed. Implementer isolation, secret exclusions and the remaining protected paths remain enforced.

Validation of the final standing repair and replacement artifacts:

• The director inspected all 192 idle/walk production cells at 4× nearest, all 82 rig PNGs, and actual Godot attack movies with and without VFX. Each final movie contains 2,338 original frames at 60fps; 24 dense pages cover all 24 stationary attack facings, and a separate six-player lane covers walk, stop, attack, recovery and departure. The title-party movie was also inspected.
• Independent canonical-head, stance, live-transition and forecourt tests passed. Six deliberately broken identity/stance/motion variants failed the intended checks, then passed after exact restoration. The 187 art/runtime files pinned by the rendered review remain exact; the only changed pin is the offline generator, whose new arithmetic preserves all approved output pixels. The measured opaque body height is 107–109 source pixels, or 27.285–27.795 world pixels at the unchanged 0.255 scale.
• The initial Linux CI found a CPU-dependent saturation blend in four marsh-glow guardian sheets. Explicit binary32 rounding now preserves the approved pixels: all 89 outputs on both Mac and Linux match exactly, including every guardian sheet. Six new asset-path regressions pass; separate-rounding and native-Linux negative controls fail the intended real-bake checks. No PNG, master or runtime was changed.
• Final installed APK 18 passed the emulator's 24-facing idle review and six walk/dash movies. The physical Galaxy Z Flip5 separately passed 24 clean idle facings and six actual walk/dash movies: 70 inspected dense pages contain 3,242 consecutive original native frames. Every direction showed all four walking frames. Full overviews, playback to the end and a separate six-hero combat review were inspected. Native timing is variable; these recordings do not claim native 60fps. Obscured or non-moving capture routes were excluded and replaced.
• The final root pnpm verify passed all 80 registered game/IAP checks, locale, repo rules, skills, deterministic assets and docs. Knight Lv40 remains below the unchanged 1,200-node limit at 1,198. Two final local product-review rounds used different angles—source/measurements, then packed artifacts/native rendering—and found no further product defect. Hosting build/check also pass.
• APK 18, signed AAB 18, Debug iOS 13 and distribution IPA 13 contain the current 100 hero payloads. Android source/import checks pass, and the entire iOS Debug and Release PCKs match. The iOS archive includes normal Assets.car, AppIcon and Apple-login entitlements. Local validation/upload dry-runs and Apple server Validate pass. A packaging-time freshness check required regenerating the signed AAB; its entire SHA-256 and all 100 hero payloads remain byte-identical to the reviewed artifact.
• Preserving installs kept stopped game-container bytes intact on the emulator, Galaxy and iPad. Native SDK preferences and Keychain were not reset. Read-only Firebase evidence confirms Google/Apple profile, public-ID reservation and checkpoint ownership. Guest/Google cold restart/resume was observed before the standing repair. The current iPad title was inspected, but current-build human Apple login, continue and cold-restart interaction remains pending; an exhaustive iPad direction/input matrix is not claimed.

The previous iOS build-12 review was canceled and read back as DEVELOPER_REJECTED; Google Play build 17 was already published. Both replacement candidates display 4.0.0. Android 18 is now registered on the internal test track, with its dedicated receipt read back as APPLIED. iOS 13 uploaded successfully, processed as VALID, and is linked to the 4.0.0 version in PREPARE_FOR_SUBMISSION; the retained-gallery apply made only the build association and internal beta-group assignment updates. Android 18 is now on production in RELEASE_LIFECYCLE_STATE_IN_REVIEW, confirmed by an independent GET. Promotion advanced asynchronously from its initial not-sent state; a follow-on submit correctly refused a duplicate. App Store formal submission remains pending the current iPad interaction confirmation.

All 160 existing local marketing and IAP PNGs still match the baseline. The old strict capture-freshness check reports changed runtime bytes; retained-gallery tooling checks local integrity and remote equality and refuses image mutations. No marketing recapture, image upload or provenance regeneration is included.

The user waived the remaining ten-product physical purchase/restore checks for this release; those transactions are not reported as passed. PR #11 passed all four CI checks and merged as 5e131b1; local main matches origin with a clean working tree. Firebase Hosting is deployed: all 191 files and 28 clean routes match the generated main output over HTTPS, and the Pages mirror deployment passed. Current iPad interaction confirmation and formal App Store review submission remain the only open release steps.