feat: release v0.4.0 restrained native conversation redesign

[649472774]

Summary

Rebuild the native conversation hierarchy around borderless assistant reading, neutral right-aligned user bubbles, a compact title/model header, and one adaptive rounded composer. Bring history, real Agent/source disclosures, code controls, settings, files, login and update presentation into the same light/dark system. Preserve ordinary chat, application-owned streams, drafts/attachments, exact approvals, source identity, uncertain-result protection and Remote transport/window behavior.

Two native visual review batches resolved the six material findings. Native red/green regressions also caught and fixed source-free message actions and an enabled Send black-on-black glyph. Built rules are recorded in docs/DESIGN.md; no third-party reference assets were copied.

Exact release source and acceptance

• Signed source: 34935e87e404e5d6c135edd28f66e0cd5f038bc7; v0.4.0 / code37, com.tongxie.copilotgo.debug, min31/target36.
• APK SHA-256: cfdb1133170b1db10b5cc9d2f9cf6a82f94c8fbb725eb5cdc9a34eb8c266b685.
• Existing certificate unchanged: 89dbef99c2c81eb48b0bf28dd698631ffcdf8ad7cbb4dac9960914096e68928b; rollback source v0.3.0.
• Exact-source CI succeeded. Local JVM: 560 passed, 2 explicitly opt-in WebLiveSmokeTest cases skipped; lint: 0 errors, 64 warnings.
• Seven final native runs / 144 passing cases across the reserved AOSP31 and AOSP36 fixtures: each published-code36-to37 updater verification, 59 affected UI/functional cases and six true short-wide cases per API, plus 12 final normal-profile gallery cases.
• Both installed exact signed APK bytes, retained all six existing primary/backup/attachment hashes, restored original display/font/rotation/IME profiles, and passed actual unauthenticated cold launch.

The release bundle contains build provenance, detailed acceptance, checksums, matching 411dp/100% light/dark before/after contact sheets and 32 uncropped synthetic native screenshots with geometry metadata.

Remaining limits

No real Copilot account or live user installation was used. Tool application HTTP/CONNECT/SOCKS proxy compatibility remains intentionally deferred (direct/suitable system VPN, explicit unsupported-route errors). No authentication, network routing, schema, execution budget or Remote website redesign is included. CI artifacts remain explicitly non-update validation APKs; only the locally pinned-signature bundle is a compatible release.