[BunsDev]

Summary

• Add Settings drafts for project-scoped approval rules, saved-rule Try it previews, and persisted decision receipts.
• Preserve approval-gate-off behavior: rules can be previewed but do not decide live approvals.
• Reconcile current main, including the browser bridge and the merged iPhone companion. Keep both Settings project context and companion pairing available.
• Preserve the original dirty recovery worktrees; this PR contains the reconciled implementation.

Verification

• Clean install, workspace build and typecheck passed.

• 15 core tests, 248 desktop tests and the browser bridge test passed.

• All 94 desktop end-to-end checks passed, including approval rules and companion pairing.

• Reconciled release-workflow fix 3498616 in signed head 52b85dd. App source/dependencies match the 94-e2e-verified 28be117 tree; fresh build, unit tests and typecheck passed before push. Exact-head CI is running. Earlier push CI passed all jobs; PR CI passed after rerunning a missed-tap iPhone test, documented in the acceptance record.

• Live Jev preview acceptance passed on 2026-10-05 through the saved Modex credential and transport: allow a test command, refuse deletion, and downgrade escalation to ask. All three used live Jev responses with no errors; no commands or coding turns ran, no settings were written, and the production gate remained off.

Release scope

This follows v0.0.6 and stays separate from palette/release PR #106. The gate remains off. Human acceptance of live approval flows and broader judge evaluation remain required before enabling automatic rule decisions; the three live preview examples do not establish general judge correctness. See docs/approval-rules.md and the reconstructed part 2 specification.