Release v1.7.0

## What's New

### sing-box 1.13.3
- Updated sing-box core from 1.12.19 to 1.13.3
- Cherry-picked neko patches for compatibility
- Updated gvisor, removed deprecated APIs (conntrack, legacy tun fields)
- Fixed gVisor close panic on profile switch
- Go updated to 1.24.7

### Yggdrasil Subscription (NEW)
- Auto-update Yggdrasil config via JSON subscription over overlay network
- New subscriptionUrl field in Yggdrasil profile settings
- Checks when first peer comes online + every 3 hours
- Auto-restarts VPN when config changes
- Supports profile fields: peers, dns, proxy addresses, runetRules, name
- Supports global app settings: proxy mode, app lists (set/add/remove), DNS, sniffing, IPv6
- Can add non-Yggdrasil profiles via addProfiles (vless://, ss://, trojan://, hysteria2://, etc.)
- Config versioning (skip if not newer) and minAppVersion check
- Full documentation: docs/subscription_format.md

### Subscription Export (NEW)
- Export active profile or all profiles as subscription JSON
- UI: Tools → Backup → Export Subscription JSON
- ADB API: content://net.simbabox.subscription.export/json
- Options: include global settings, include private keys, active only
- Output directly usable as subscription file on server

### QR Scanner
- Replaced zxing-lite with direct CameraX for full camera control
- 1080p analysis resolution with center auto-focus
- Dual-decode: normal + inverted luminance for light-on-dark codes
- Scan frame overlay with large square cutout

### App Blacklist (NEW)
- New always-bypass app list in Settings → Routes
- Selected apps always bypass VPN regardless of proxy mode

### Auto-Update
- Check on app start + every 24 hours
- Download and install APK from GitLab releases
- Handle GitLab APK download links directly in-app
- Fixed false update notification on same version

### Peer Editor
- Drag-and-drop reordering
- Edit, copy, delete buttons per peer
- Country flags via GeoIP lookup
- Priority display from URI parameters
- Raw text editor for bulk editing
- Comment lines hidden from display

### Bug Fixes
- Fixed profile save overwritten by traffic stats on VPN stop
- Fixed default DNS (was DoH, now plain DNS) and FakeDNS (was enabled, now disabled)
- Fixed tun config for sing-box 1.13 (legacy inet4/6 address fields)
- Allow editing active profile while VPN is running
- Increased URL test timeout for Yggdrasil (30s + 10s startup delay)
- Increased TCP ping timeout for Yggdrasil (30s)
- Profile list refreshes on resume and instantly via FileObserver on subscription update
- Peer count excludes comment lines