Pinakes v0.7.79

The Emeroteca reaches the Android app (re-cut of the unpublished 0.7.78: its tag-triggered build died on the npm registry's retired audit endpoint before any asset was produced, and tags are immutable — same recovery as 0.7.74/0.7.75) (PR #411).

Added

• Periodicals mobile bridge. The emeroteca plugin (1.2.3 → 1.3.0) mounts five read-only endpoints under /api/v1/periodicals/*, mirroring the book-club bridge pattern: inert when the Mobile API plugin is inactive, nonexistent when emeroteca is inactive, and reusing the Mobile API authentication, token-quota and HTTPS middleware. Mastheads (keyset cursor, search over title/subtitle/ISSN, type filter with 422 on invalid values, shared-publisher join guarded for degraded installs without the optional editori table), volume years with derived holdings, issues with per-copy state and has_public_pdf, issue detail with the article-level table of contents. The PDF URL is exposed only when the per-issue public flag is on, always via the public streaming route — internal paths, notes and inventory numbers are never serialized. ETag/304 on every read endpoint; OpenAPI contributed through the mobile_api.openapi filter; one manifest row per endpoint in the idempotency spec. The plugin version bump re-runs activation on already-active installs so the new hook lands without manual steps. The companion Android release (1.5.0) gates its new Emeroteca section on the /periodicals/health probe.

The ZIP was built twice with an identical SHA-256, audited as the
exact distributable, accompanied by an SPDX SBOM, and signed with
a GitHub artifact provenance attestation.