Omaclipsync 0.4.1

Omaclipsync 0.4.1

Fix a conditional privacy failure in 0.4.0: a saved pause or receive-only change
could leave the old upload policy active after an encrypted-state write failed.
If storage later recovered, a fresh copy could be uploaded under that old policy.

• Fence clipboard/notification callbacks, adopt the saved selection immediately,
  and quarantine a failed old session outside automatic and manual sync paths.
• Retry application of the saved configuration every 30 seconds while blocked.
  Do not overwrite a saved restriction with a resume before cleanup succeeds.
• Return an explicit application error; refresh the shell's saved configuration
  and status and show English/Chinese recovery feedback.
• Add deterministic paired-session storage-failure, recovery, restart and shell
  reply regressions. Keep uncertain-upload cancellation and device identity.

Shared core remains 0.4.0, wire protocol 3, with Server 3.0.0 and
Desktop 0.5.0. This patch changes only Omaclipsync. Both bundled executables
are rebuilt and byte-compared in the pinned builder before verified packaging.

Marketplace approval still applies only to its exact reviewed commit. The source
and build evidence supplement maintainer review; they are not a security audit.