iOS 计划完成：流式发送 / 后台续传 / APNs / Share Extension / 控制中心控件 + 真机分发预备

- 发送端流式（R-iOS-4）：新增 FileSource 抽象（web/src/features/transfer/source.ts），iOS 经 HTTP Range 惰性拉取（原生 WKURLSchemeHandler 认 Range 头 seek 回 206），整文件不进 WebView 内存；web/桌面经 fileSource 包装字节不变。p2p/relay/transfer 改吃 FileSource
- 后台续传：iOS 26 BGContinuedProcessingTask（BackgroundTaskManager + AppDelegate 注册 + BGTaskSchedulerPermittedIdentifiers），引擎传输进度驱动系统进度 UI
- APNs：后端 internal/apns（ES256 .p8 JWT + HTTP/2，仿 internal/push）+ push_subscriptions.platform 列 + POST /api/push/apns/register + transfer/message 未投递分支分流；原生 PushRegistry 授权 + 设备令牌经引擎桥 registerPush 上报；aps-environment + remote-notification 后台模式
- Share Extension：CDropShare appex 抓文件 → App Group 收件箱 → cdrop://share 深链唤主程序选设备发送（只交接、不跑引擎）
- 控制中心剪贴板两控件：CDropWidgets widgetkit appex（ControlWidget + AppIntent + 纯原生 ClipboardClient REST）；用专用 broker 设备会话（主程序经引擎 provisionWidgetSession 代铸独立 device_id 会话存 App Group，控件自刷不与引擎抢 refresh 轮换）
- 真机分发预备：committed 签名改 ad-hoc 使模拟器 entitlement 生效；真机手动签名 scaffold（Signing.xcconfig 仅 device SDK 套 Manual + gitignore 的 Local.xcconfig 填 Team/profile）+ just ios-device / ios-devices 全 CLI 装机；包名改 net.commilitia.Commilitia-Drop（含 .share/.widgets，BG task 前缀同改）；REALDEVICE.md 重写为门户 + CLI 装机手册
- I18n.swift 移 Shared/ 供三 target 共用；i18n 加 ios.bg/share/control.* 键
- ultracode 多 agent 审查修复（0 HIGH，2 MED + 7 LOW）：分享 send 后留收件箱致重发→move 私有暂存；WidgetSession 锁屏文件保护→UntilFirstUserAuthentication；outgoing/安全作用域登出释放；控件 device_id 登出清理；并发控件 refresh CAS-before-clear；APNs 读 reason + prune bad token + bust 过期 JWT；APNSEnv 大小写归一；Share-ext completeRequest 挪进 open 回调

internal/push/sender.go

@@ -137,7 +137,7 @@ func (s *Sender) Notify(ctx context.Context, userID, deviceName string, n Notifi
 	}
 }
 
-func (s *Sender) send(ctx context.Context, sub db.PushSubscription, payload []byte) {
+func (s *Sender) send(ctx context.Context, sub db.ListPushSubscriptionsByUserDeviceRow, payload []byte) {
 	resp, err := webpush.SendNotificationWithContext(ctx, payload, &webpush.Subscription{
 		Endpoint: sub.Endpoint,
 		Keys:     webpush.Keys{P256dh: sub.P256dh, Auth: sub.Auth},
@@ -192,7 +192,10 @@ func endpointHost(endpoint string) string {
 	return u.Host
 }
 
-const defaultLocale = "zh-CN"
+// DefaultLocale is the fallback when a subscription carries an unrecognized or
+// empty locale. Exported so the apns package (and future channels) can use the
+// same constant without re-declaring it.
+const DefaultLocale = "zh-CN"
 
 // notifyStrings holds the few server-rendered notification templates, keyed by
 // locale then string id. The set mirrors the frontend i18n only for these push
@@ -219,9 +222,9 @@ var notifyStrings = map[string]map[string]string{
 }
 
 // render turns an intent into the wire payload, localized to the subscription's
-// stored locale. Unknown locales fall back to defaultLocale.
+// stored locale. Unknown locales fall back to DefaultLocale.
 func render(n Notification, locale string) wirePayload {
-	title, body := localize(n.Type, n.Params, locale)
+	title, body := Localize(n.Type, n.Params, locale)
 	out := wirePayload{Type: n.Type, Title: title, Body: body, Tag: n.Tag, URL: n.URL}
 	if out.URL == "" {
 		out.URL = "/"
@@ -229,7 +232,11 @@ func render(n Notification, locale string) wirePayload {
 	return out
 }
 
-func localize(typ string, params map[string]string, locale string) (title, body string) {
+// Localize resolves the notification title and body for the given type, params,
+// and locale. Unknown locales fall back to DefaultLocale. Exported so other
+// delivery channels (e.g. APNs) can share the string tables without duplicating
+// them.
+func Localize(typ string, params map[string]string, locale string) (title, body string) {
 	// A message's title is the sender's device name and its body is the user's
 	// own text — neither is a template, so locale is irrelevant.
 	if typ == KindMessage {
@@ -238,7 +245,7 @@ func localize(typ string, params map[string]string, locale string) (title, body
 
 	t, ok := notifyStrings[locale]
 	if !ok {
-		t = notifyStrings[defaultLocale]
+		t = notifyStrings[DefaultLocale]
 	}
 	switch typ {
 	case KindTransferIncoming: