fix/upload refresh stability

[elifouts]

• feat: update privacy policy and topbar design
• Removed github hookss not needed. screw you co-piolot

[Copilot]

Pull request overview

This PR mixes frontend publishing/UX updates (shared topbar, privacy policy additions, deep link setup, EAS/app config tweaks) with significant API/client networking changes (refresh/fallback behavior, timeouts) and backend operational/security work (nginx, upload validation), plus removal of multiple test suites and addition of runtime artifacts (uploads/backups/logs).

Changes:

• Frontend: introduce shared static-site topbar assets, update multiple public HTML pages, and add deep-link association files/docs.
• Frontend API client: adjust request timeouts, add multi-base-URL racing/fallback, and tweak refresh behavior for feeds/auth calls.
• Backend: harden upload validation, update nginx proxy/upstream/TLS settings, add docker entrypoint secret generation, and add DB indexes.

Reviewed changes

Copilot reviewed 55 out of 75 changed files in this pull request and generated 14 comments.

Show a summary per file

File	Description
scripts/FormatForAppStore.ps1	Adds a helper script intended to re-encode videos to 30fps for store submission.
run-front.sh	Adds a bash helper to run the frontend against a hosted API via env vars.
run-front.ps1	Adds a PowerShell helper to run the frontend against a hosted API via env vars.
frontend/tsconfig.json	Removes Jest typings from the TS compile environment.
frontend/services/api.ts	Major client networking/refresh/fallback changes plus URL/media path filtering.
frontend/scripts/reset-project.js	Removes the Expo starter “reset project” script (deleted).
frontend/public/tester-application.html	Updates static tester page and switches to shared topbar injection.
frontend/public/shared/topbar.js	Adds JS to fetch/inject a shared topbar and set active nav state.
frontend/public/shared/topbar.html	Adds shared topbar markup including CTA link.
frontend/public/shared/topbar.css	Adds shared topbar styling for static pages.
frontend/public/privacy-policy.html	Updates policy page content and switches to shared topbar injection.
frontend/public/index.html	Updates landing page styling/topbar wiring and content.
frontend/public/features.html	Updates features page styling/topbar wiring.
frontend/public/csae-standards.html	Updates CSAE page styling/topbar wiring.
frontend/public/apple-app-site-association	Adds iOS Universal Links association file.
frontend/public/account-deletion.html	Updates deletion page styling/topbar wiring.
frontend/public/about.html	Updates about page styling/topbar wiring.
frontend/public/.well-known/assetlinks.json	Adds Android App Links association file.
frontend/package.json	Removes Jest/dev tooling and multiple deps; adds @react-navigation/elements.
frontend/hooks/useAutoRefresh.ts	Adjusts auto-refresh to no longer force a fresh-read window.
frontend/eas.json	Adds production env vars and changes Android submit track.
frontend/contexts/NotificationsContext.tsx	Increases notification polling interval.
frontend/contexts/AuthContext.tsx	Adds a shared clearSession path and hardens SecureStore error handling.
frontend/components/tests/ThemedText-test.tsx	Removes a Jest-based component test (deleted).
frontend/app/streams.tsx	Changes refresh strategy and defers “builder counts” enrichment to a second pass.
frontend/app/bytes.tsx	Changes refresh strategy and defers user/project enrichment to a second pass.
frontend/app/_layout.tsx	Adds font-load fallback timing so splash/navigation can proceed if fonts fail/hang.
frontend/app/(tabs)/index.tsx	Changes feed enrichment to staged loading (base UI, then enrich).
frontend/app/(tabs)/explore.tsx	Changes explore enrichment to staged loading (base UI, then enrich).
frontend/app/(auth)/sign-up.tsx	Removes preflight API health check and adjusts layout spacing.
frontend/app/(auth)/sign-in.tsx	Removes preflight API health check and adjusts layout spacing.
frontend/app.json	Updates icons/splash, increments build numbers, and adds iOS associated domains.
frontend/README.md	Removes documentation for the deleted reset-project script.
frontend/DEEP_LINK_SETUP.md	Adds documentation for Universal Links / App Links setup.
frontend/.gitignore	Adds a specific keystore filename to ignores.
backend/uploads/u5_d8d0b793924c9834ebcabf88.jpg	Adds a binary upload artifact under backend uploads.
backend/uploads/u2_34db848e14529523fe699c2e.jpg	Adds another binary upload artifact under backend uploads.
backend/scripts/update-live.ps1	Adds hosts-file override warning for devbits.ddns.net.
backend/nginx/nginx.conf	Refactors proxying to an upstream, adds deep-link file locations, and adjusts TLS/limits.
backend/go.mod	Adds lib/pq and removes testify (tests removed).
backend/docker-entrypoint.sh	Adds entrypoint that generates a JWT secret when missing.
backend/crash.log	Adds a crash log artifact file.
backend/crash-errors.log	Adds a crash error log artifact file.
backend/backups/db/devbits-uploads-20260222-035047.zip	Adds a DB/uploads backup artifact.
backend/backups/db/devbits-db-20260224-183554.sql	Adds a DB dump artifact containing application data.
backend/api/main.go	Adds nosniff header for uploads and changes auth requirement on by-builder route.
backend/api/internal/tests/user_test.go	Removes backend API tests (deleted).
backend/api/internal/tests/project_test.go	Removes backend API tests (deleted).
backend/api/internal/tests/post_test.go	Removes backend API tests (deleted).
backend/api/internal/tests/comment_test.go	Removes backend API tests (deleted).
backend/api/internal/tests/main_test.go	Removes backend API tests (deleted).
backend/api/internal/handlers/project_routes.go	Removes auth enforcement for “projects by builder” handler.
backend/api/internal/handlers/profile_picture_routes.go	Switches profile-picture upload to shared validation/extension resolution.
backend/api/internal/handlers/notifications_routes_test.go	Removes handler unit tests (deleted).
backend/api/internal/handlers/media_routes.go	Adds upload validation (type/size), allowlists, and returns media type metadata.
backend/api/internal/handlers/media_ingest.go	Adds allowlist enforcement when materializing remote/data-URI media.
backend/api/internal/database/create_tables.sql	Adds several indexes to improve query performance.
backend/Dockerfile	Adds openssl + entrypoint wiring for secret generation.
README_PUBLISHING.md	Adds publishing/deep-link/push notification operational checklist.
.vscode/settings.json	Removes VS Code settings file (deleted).
.idea/vcs.xml	Removes IntelliJ project file (deleted).
.idea/modules.xml	Removes IntelliJ project file (deleted).
.idea/misc.xml	Removes IntelliJ project file (deleted).
.idea/markdown.xml	Removes IntelliJ project file (deleted).
.idea/DevBits.iml	Removes IntelliJ project file (deleted).
.idea/.gitignore	Removes IntelliJ project file (deleted).
.gitignore	Adds repo-level ignores for secrets/build output.
.expo/settings.json	Removes Expo local settings (deleted).
.expo/README.md	Removes Expo local settings readme (deleted).

Files not reviewed (8)

• .idea/.gitignore: Language not supported
• .idea/DevBits.iml: Language not supported
• .idea/caches/deviceStreaming.xml: Language not supported
• .idea/markdown.xml: Language not supported
• .idea/misc.xml: Language not supported
• .idea/modules.xml: Language not supported
• .idea/vcs.xml: Language not supported
• frontend/package-lock.json: Language not supported

Comments suppressed due to low confidence (2)

frontend/public/features.html:12

• The features page <title> is set to "Become a Tester" even though this is the Features page. Please use a page-specific title (e.g., "DevBits Features") to avoid confusing tab labels and SEO metadata.
  backend/backups/db/devbits-db-20260224-183554.sql:707
• This SQL dump contains highly sensitive/production-like data (password hashes, push tokens, user bios/links, and message content). It should not be committed to the repository. Please remove it from git history and add ignores for backend/backups/ (and any other DB dump locations), and rotate any affected credentials/tokens if this came from a real environment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

@elifouts I've opened a new pull request, #100, to work on those changes. Once the pull request is ready, I'll request review from you.

[Copilot]

@elifouts I've opened a new pull request, #101, to work on those changes. Once the pull request is ready, I'll request review from you.

[Copilot]

@elifouts I've opened a new pull request, #102, to work on those changes. Once the pull request is ready, I'll request review from you.

[Copilot]

@elifouts I've opened a new pull request, #103, to work on those changes. Once the pull request is ready, I'll request review from you.

[Copilot]

@elifouts I've opened a new pull request, #104, to work on those changes. Once the pull request is ready, I'll request review from you.