feat(swift-ios): show bundled open source licenses

[t3dotgg]

SwiftUI has no way to read the licenses for the code it ships. Settings now has a searchable list of bundled license notices with full text and source links. It works offline.

The snapshot covers pinned Clerk, Nuke, and PhoneNumberKit packages, plus GhosttyKit and its bundled libraries and fonts. It uses upstream license files and notices from the pinned source archives. The iOS archive was checked to identify bundled libraries. The simdutf notice uses version 9.0.0 from its vendored header, not the stale 5.2.8 package label.

The generator updates Swift package pins and checks the Ghostty revision. Run node apps/swift-ios/Scripts/sync-license-notices.mjs to refresh notices, or add --check to verify the saved dependency metadata without network requests.

Validation: generator, metadata check, JavaScript syntax check, targeted formatter, and git diff --check passed. The central native run passed NativeLicenseCatalogTests, 1 test, with the shipped app resource. UI evidence remains part of the central integration pass. No build, simulator, or release channel was changed here.

Created with Codex.

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This PR adds a new production license-browser screen, bundled legal-notice data, searching, detail navigation, and external source links. The implementation is localized, but the new user-facing component and associated runtime content warrant human review.

^{You can add or adjust custom eligibility rules. Learn more.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

ℹ️ No successful main baseline artifact is available yet. This run establishes the initial measurement.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	—	13.6 KiB	—	15.1 KiB	✅
Codex	Thread snapshot wire	—	7.0 KiB	—	7.3 KiB	✅
Codex	Live turn WebSocket wire	—	6.6 KiB	—	7.8 KiB	✅
Codex	Live turn WebSocket decoded	—	57.1 KiB	—	66.4 KiB	✅
Codex	Live turn messages	—	10	—	21	✅
Claude	Total thread wire	—	13.6 KiB	—	15.1 KiB	✅
Claude	Thread snapshot wire	—	7.1 KiB	—	7.3 KiB	✅
Claude	Live turn WebSocket wire	—	6.5 KiB	—	7.8 KiB	✅
Claude	Live turn WebSocket decoded	—	57.8 KiB	—	66.4 KiB	✅
Claude	Live turn messages	—	9	—	21	✅

Baseline: unavailable · PR result: 1d0aa8f · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 113.9 KiB
• Claude decoded thread snapshot: 114.6 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.