GitHub 上的 Codex 代码审查：在发布前发现上架阻碍、泄露的密钥和损坏的移动端布局

## Code Review Rules

These rules protect the App Store and Google Play releases of our WebViewGold
apps, which load this web app in a native WebView. Treat every violation below
as P1.

### Secrets
- No API keys, service-role keys, private keys or tokens in client code, in
  public env variables (NEXT_PUBLIC_*, VITE_*) or in committed .env files.
- Server-only keys (database service role, OpenAI, Stripe secret) are read in
  server code only.

### Store rules
- Digital goods, subscriptions and credits: when isNativeApp() is true, buy
  buttons use the in-app purchase path (revenuecat://purchase?...). No Stripe
  checkout, card form or external payment link for digital goods in the app.
- Account deletion (settings screen and /delete-account) keeps working and
  deletes server-side.
- A new Google, Facebook or other third-party login requires Sign in with
  Apple with equal prominence.
- /privacy and /terms stay reachable from settings and the footer.
- No placeholder text, lorem ipsum, "coming soon" screens or dead links in
  routes reachable from the app.
- No "Download our app" banners or App Store / Google Play links when
  isNativeApp() is true.

### Mobile layout inside the WebView
- Fixed headers, footers and bottom sheets pad with env(safe-area-inset-*).
- Tap targets 44x44px or larger; inputs use font-size 16px or more.
- No hover-only controls; no horizontal scrolling at 320px width.
- Login and payment flows do not depend on window.open popups.

### WebViewGold bridge
- Bridge calls run only behind isNativeApp() and keep a web fallback.
- Only URL schemes documented in https://www.webviewgold.com/llms-full.txt.
  Flag any scheme that is not in that file.

# when you submit a build to the stores, tag the state of main
git tag store-1.2.0
git push origin store-1.2.0

# before the next submission: a base branch at the old state
git branch review/store-1.2.0 store-1.2.0
git push origin review/store-1.2.0

# review-only pull request: base = the old state, head = main
gh pr create --base review/store-1.2.0 --head main \
  --title "Release review: changes since store 1.2.0" \
  --body "Review only. Do not merge."