ProtonBridge v1.1.9-rc.1

1.1.9-rc.1 — handle Android background-start restrictions safely

• Handle Android ForegroundServiceStartNotAllowedException distinctly from
  transfer errors. Scheduled tasks defer with bounded WorkManager backoff instead
  of immediately recording a failed transfer. Waiting does not send failure
  notifications or queue failure follow-ups, and the temporary notification and
  transfer admission are released. Cancellation still takes priority.
• After the retry budget is exhausted, or if a manual start is denied, report
  needs user action with Android battery/background-settings guidance. The
  rejection occurs before native work and before any bisync state transition;
  the existing baseline remains unchanged. This error does not itself require
  resync. Other permission errors and timeouts remain separate failures.
• Distinguish missing initialisation, pending preview approval, changed task/filter/
  configuration/engine fingerprints, interrupted runs and invalid saved baseline
  identities in readiness diagnostics. Keep all existing approval/recovery guards.
  Changing filters on 1.1.7 can invalidate approval independently of a scheduled
  foreground-service rejection.
• Retain the reviewed 1.1.8 fixes. A working marker exclusion does not repair the
  demonstrated listing/download checksum inconsistency, recycled filter-editor
  callbacks, long-secret redaction or configuration-write defects. No engine or
  fingerprint-policy change is introduced by this release, so a healthy 1.1.8
  baseline does not need reinitialisation merely because the app version changed.
• Regression tests inject the real Android exception through a worker foreground
  updater on API 33 and check retry history, terminal user-action reporting and
  byte-for-byte preservation of ready state. A negative permission-error fixture
  checks that unrelated errors are not retried as start restrictions. Readiness
  tests retain the same baseline guards and verify distinct diagnostics.
• Validation passed before committing: independent review, 205 Android host/unit
  tests with no failures or skips, lint, debug APKs and engine provenance. The
  signed workflow repeats host checks and verifies package,
  version codes, certificate, architectures and distribution checksums.
• Platform limit: retries cannot force Android to permit a scheduled foreground
  service. For long unattended transfers, review ProtonBridge's App info → Battery/
  background settings, or open the app and run the task. Allowing unrestricted
  background operation can use more battery. No automatic battery exemption,
  exact-alarm permission, expedited-job conversion or checksum bypass is added.