v0.5.0

Added

trackLinkOpen(url) reports a link that opened the app without the browser being
involved. A Universal Link or App Link hands the app the URL directly, so Tolinku
is never contacted and the tap is not counted. The taps that go missing are the
ones from people who already have the app, so a campaign aimed at existing
customers reads as a failure exactly when it worked.

Call it wherever the app receives a link. Both arrivals need it: a link that
launches the app cold arrives somewhere different from one tapped while it is
already running. Wiring both is safe, since the same link inside a few seconds is
reported once.

claimBySignals accepts the signals as parameters on every SDK, overriding what
the device reports. iOS and Android previously took none.

Fixed

A blank override no longer discards the value the device reported. An unset
configuration value and a failed lookup both arrive that way, and matching counts
a signal that is present and disagrees while skipping one that is absent, so
sending the blank made the match worse rather than leaving it alone.

One rule now decides what a link may open, in every SDK. Android matched a
prefix, so it refused HTTPS:// in capitals, which the other four opened.