chore(release): prepare Nova 1.3.6

[papi-ux]

Summary

Prepare Nova v1.3.6 while keeping the product on the approved 1.3.x patch line.

• bump Android versionName to 1.3.6 and versionCode to 38
• publish release notes for the server-authoritative launch catalog, session-only launch overrides, Doctor apply/verify/undo, TLS/launch hardening, focus recovery, and isolated benchmark tooling
• add Fastlane changelog 38.txt and pin it in the public-doc/release metadata contracts
• fix the README's stale Latest Release anchor
• align the local release preflight and its output with the tag workflow's signed ARM64, ARMv7, and x86_64 asset set

Exact candidate

74d56fc59bb22845719b4b4b9efb715a904a1e00

Verification

• release metadata TDD: bumped contract failed against old metadata, then passed on the candidate
  • GREEN log SHA-256: 303083d25012e2b527bc1891d4402eb0d2c053977ba49a60233f5d16b7b2f8c8
• bash scripts/check-public-docs.sh — passed
• bash scripts/check-public-surface.sh — passed
• strict lintNonRoot_gameDebug with -PlintFailOnError=true — passed
• full testNonRoot_gameDebugUnitTest — passed
• three-ABI assembleNonRoot_gameRelease — passed
  • combined CI-equivalent gate log SHA-256: 56b463944c2f02f57c4fdec51cd5bd4cd3fcb6fa543cdd9a399fd25fabef1ba1
• unsigned local build artifacts (build evidence only):
  • ARM64: 0d1cdf385a7830ffae45d6f6ed772fea899c0acaf6dbe060d19d17b53daeee9c
  • ARMv7: d7b1492758fa8b5e5f93ab4747aa3fa367388a9affc0c920aa982c49ab36ea6f
  • x86_64: dfe17f84888fa992d8fd41bedce19adcde80bc2e6752f6e7bd4fd787e53589b5
• independent read-only Codex review found only that the new Fastlane file was not yet tracked; the exact seven-file commit includes it
• git diff --check — passed

Publication gate

This PR does not authorize merge, tagging, release publication, deployment, or announcement.

After merge, final publication still requires the exact signed ARM64 artifact to prove package/version identity, signer continuity, installation and launch on the Retroid Pocket 6, controller focus, one session-only launch override without persistent host-default mutation, one Doctor apply/verify/undo flow, and clean stream teardown. Gyro issue #181 remains open and is not claimed fixed.

[papi-ux]

Maintainer approved merging this exact candidate with the final device/runtime matrix deferred.

This is a merge-only waiver, not device validation. The following remain unperformed and must stay explicit release-publication debt:

• exact signed ARM64 package/version identity and signer continuity
• installation and launch on the Retroid Pocket 6 target
• controller focus
• one session-only launch override without persistent host-default mutation
• Doctor apply, verify, and undo
• clean stream teardown

Gyro issue #181 remains open and is not claimed fixed. This approval does not authorize tagging v1.3.6, publishing a release, deployment, or announcement.