feat: ship VS2010-inspired release toolkit foundation

[TrapEmAll]

Summary

This prepares UnityScraper 1.2.0-beta.1 as a safer, more complete Xbox 360 knowledge and preservation workspace.

• refreshes the modern and legacy desktop surfaces with a compact Visual Studio 2010-inspired charcoal/blue theme
• adds migration 10 for metadata snapshots, library intelligence, preservation reports, corrections, hardware inventory, and package extraction records
• adds portable non-personal metadata snapshots with provenance-preserving merge behavior
• adds library audits, source-aware preservation reports, correction exports, and local hardware records
• adds bounded read-only STFS extraction for consecutive files, atomic output, path validation, hashes, and manifests
• adds local Xenia discovery and direct game launch without shell interpolation
• runs checksum-approved metadata plugins in a bounded child process, including from packaged executables
• adds scoped REST API tokens, request limiting, and toolkit/package endpoints
• adds bounded JSON language packs with English fallback and first-run sync choices
• expands recovery reporting and CLI parity
• updates Windows, Linux, and macOS packaging metadata and release documentation

Migration notes

Database schema version advances from 9 to 10. Migration 10 is additive and creates:

• metadata_snapshot_runs
• library_intelligence_runs
• preservation_report_runs
• correction_packages
• hardware_inventory_records
• package_extraction_runs

Existing library, download, knowledge, profile, save, and transfer data is preserved. No destructive migration or user reset is required.

Safety and privacy

• Metadata snapshots contain source-attributed catalog knowledge only and explicitly exclude profiles, saves, paths, credentials, and game content.
• STFS support remains read-only and extracts only files whose consecutive allocation can be verified. Fragmented files are reported and skipped.
• Package/profile resigning, raw FATX mutation, and automatic destructive repair remain disabled until they can be made recoverable and independently verified.
• Plugins run in a separate process with time/output limits. This contains crashes and runaway output, but is not represented as an OS permission sandbox.
• XboxUnity transport remains explicitly HTTP-only. This change does not add or prefer HTTPS for XboxUnity.

Source and licensing considerations

UnityScraper stores provenance, source URLs, revisions, and license metadata rather than flattening third-party knowledge into unattributed claims. The STFS reader follows the public Free60 format reference. Existing source adapters retain their source-specific policy and licensing boundaries; no commercial game content, encryption keys, firmware, or restricted binaries are bundled by this work.

Validation

• Ruff: passed
• Python compile check: passed
• Version consistency: passed
• Primary suite: 108 passed
• Integration suite: 31 passed
• Hidden 12-page desktop composition smoke: passed
• Windows PyInstaller build: passed
• Packaged isolated-plugin execution: passed
• Windows visual review: passed

Follow-up adapters

The next source-specific increments should deepen, rather than blur, the existing adapter boundary:

• XenonLibrary: normalized hardware revisions, PCB/FAB/component identities, and license-preserving citations
• Free60: structured formats, boot/system internals, freshness warnings, and article relationships
• Redump DAT: physical-disc identity, serial/ring metadata, hashes, regions, and disc relationships
• No-Intro DAT: digital/package naming, regions, languages, versions, and hashes

Each adapter should retain raw-cache provenance, rate limits, source revisions, conflicts, and field-specific trust priorities.