CookTrace v1.0.0: Semver Adoption, Email Overhaul, Mobile Sync Date Fix

[thebigjoe1]

Retiring -rc.N and moving to strict semver. Docker images now
publish under multiple tags so you can pin :1.0, :1, or :latest
depending on how aggressively you want updates. Also delivers a real
Send Test email flow with recipient dialog, fixes two Android bugs
(recipes showing the wrong creation date, and SMTP settings loading
blank), patches a high-severity adm-zip CVE in the backup restore
path, and adds public contributor docs.

Every future release uses strict semver: PATCH for bug fixes, MINOR
for new features, MAJOR for breaking changes. Existing rc.N image
tags and release assets stay live indefinitely; anyone pinned to a
specific rc release is unaffected.

Added

• Multi-Tag Docker Publishing. :1.0.0, :1.0, :1, :latest.
  Pin :1.0 to auto-receive patches without opting into future
  1.1.0 features.
• :dev Docker Tag. Rolling image built from the dev branch.
• Send Test Email Dialog. Asks where to send the test,
  pre-filled with your account email.
• Public Contributor Docs. ARCHITECTURE.md and ROADMAP.md.

Changed

• Retired the -rc.N suffix.
• Send Test actually sends an email now (was just verifying SMTP
  auth).
• Email section moved under Admin.
• Password field uses a Change button when the server has a
  stored value.

Fixed

• Recipes on Android showed the first-connect date instead of the
  real creation date. Heals on next sync after upgrade.
• Email settings blank on the Android app.
• Trace AI chef hat clipped at the top of the FAB.

Security

• adm-zip 0.5.x → 0.6.0 (CVE-2026-39244, high). Crafted ZIP file
  could trigger a 4GB memory allocation during full-backup restore.

---

Signed APK on the release page. Docker image is multi-arch (amd64 + arm64):

docker compose pull && docker compose up -d