feat: add unified community hub and macOS support

[TrapEmAll]

Summary

This completes the twenty-item community roadmap as UnityScraper 1.1.0-beta.1 and adds the Community Hub as the shared desktop surface.

• adds unified local search across games, knowledge, profiles, saves, achievements, files, and tools
• extracts typed hardware, dashboard, exploit, error, format, repair, and tool records from cached source documents with provenance
• adds guided console sync previews with explicit queueing through the existing persistent resumable transfer engine
• adds profile dashboards, read-only STFS workspaces, ownership-change previews, block-level save comparison, played-title history, and validated GPD image export
• adds preferred artwork exports, multi-disc audits, SHA-256 dedup plans, recoverable quarantine/hardlink actions, read-only FATX audits, and original Xbox discovery
• adds bounded plugin installation/update, recovery actions, FTP dashboard capability probes, high contrast, large text, reduced motion, and keyboard hints
• repairs legacy translation mojibake at load time
• adds unsigned Apple Silicon macOS preview packaging and extends CI testing to Windows, Linux, and macOS
• hardens Windows packaging with explicit Tcl/Tk runtime data and persistent frozen-startup crash reports

Database migration

Schema migration 8 is additive. It creates durable tables for structured knowledge, sync plans/actions, profile ownership previews, GPD titles/images, save comparisons, artwork exports, disc and dedup audits, storage audits, original Xbox records, plugin state, recovery events, dashboard compatibility results, and accessibility preferences.

Existing library, source, profile, backup, and transfer data is preserved. No database reset is required.

Safety boundaries

• XboxUnity remains HTTP-only; no HTTPS endpoint is added or preferred.
• Sync plans never transfer automatically. Confirmed uploads are queued and remain under the normal console controls.
• Dedup actions revalidate both hashes and retain the removed copy in quarantine.
• FATX/raw-device support remains read-only.
• STFS workspaces and ownership migration remain preview-only. Signed package mutation, rehashing, and signing are intentionally disabled.
• Plugin archives are bounded, traversal-checked, installed disabled, and updates keep a rollback copy.
• macOS artifacts are unsigned and not notarized; the documentation does not ask users to disable Gatekeeper.

Source and licensing considerations

ConsoleMods, XenonLibrary, and Free60 content remains separately cached and source-attributed with revision and license data. Redump and No-Intro DATs remain user-supplied. No commercial game images, firmware, keys, SDK files, or copyrighted payloads are included.

Validation

• 102 core tests
• 31 integration tests
• Ruff and Python compilation
• version consistency check
• source desktop smoke test
• Windows PyInstaller build
• packaged Windows desktop smoke test
• clean diff validation

Follow-up

Future work can deepen source-specific XenonLibrary and Free60 structured fields, broaden Redump/No-Intro DAT formats, add a universal signed/notarized macOS release, and consider package mutation only after independent STFS rebuild/signing verification and recovery test vectors exist.