Changelog

v2.3.7

Rebuilt the app/runtime architecture around local-first ownership: APK profile, subscriptions, update check/download, and UI state now live in APK-private storage and do not require root or a module to load.
Replaced the old socket control plane with the optional /data/adb/modules/rknnovpn/bin/rknnovpn-runtime root CLI for runtime actions.
Enforced exact APK/runtime matching for root actions by comparing releaseVersion and wireEpoch.
Removed obsolete compatibility probing, generated IPC contracts, startup recovery loops, root-owned profile storage, and root-dependent subscription/update flows.
Reduced runtime status to the minimal CLI surface needed by the APK: version, status, logs, apply, start, stop, restart, reset, and module staging.
Removed dead diagnostics UI after the old diagnostics path was deleted.
Synchronized release metadata to v2.3.7.