docs: document App Attest protocol 3
Document device-bound renewable sessions
Clarify background sync freshness copy
Document opportunistic background refresh
docs: rename subscription terminology
Link policy text to the website and clarify sync triggers - Replace verbatim copies of the website's privacy policy wording in App-Store-and-Privacy and Features-and-Modes with links to the canonical pages, keeping implementation-only detail. The website is the canonical published source, and duplicated sentences drift. - Name manual syncing alongside the automatic app-open and daily background refreshes in Home and Features-and-Modes. - Document the PolyForm Noncommercial license now carried by the app and backend repositories.
docs: rewrite self-host/demo walkthrough, fix broken quickstarts Self-Hosting-and-Demo.md is now a full step-by-step guide (demo connection steps, self-host via published image or source build, TLS requirement, troubleshooting) instead of a thin config summary. Every documented backend quickstart that failed at startup (Getting Started, Testing and Verification) now includes the signing-key generation step or the minimum env for a bare dotnet run — they previously shipped the rejected placeholder key. Architecture and Features-and-Modes updated for the timezone/basal-id/dataSourceMode wire changes; Backend-Operations corrected on image tagging. Includes the maintainer's pending PumpSync-Backend -> PumpSync.backend naming pass across these same pages. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
docs: build out PumpSync wiki