feat: Add settings navigation from SignIn screen and BackHandler

- A settings icon button has been added to the `SignInScreen` top app bar, allowing navigation to the settings screen.
- The `SignInViewModel` now handles `OnSettingsClick` and `OnSignInClick` actions.
- A `BackHandler` has been added to the `SettingsScreen` to handle back navigation, returning to the splash/main screen if the back stack is empty.

feat: Introduce macOS code signing

- Added macOS code signing to the desktop build process.
- Introduced a new script (`import_macos_dev_id_cert.sh`) to import the Developer ID certificate into a temporary keychain on macOS runners.
- Created `keystore.properties` for desktop and encrypted it for CI.
- Updated the `desktop.yaml` workflow to decrypt secrets and execute the certificate import script for macOS jobs.
- Added `macOS_development.p12` to `.gitignore`.

refactor: Replace Napier with Kermit for logging

- The logging library has been migrated from Napier to Kermit across the entire project.
- Napier dependencies (`io.github.aakira:napier`) have been replaced with Kermit (`co.touchlab:kermit`).
- `Napier.x(...)` calls have been updated to `Logger.x { ... }` using lambda syntax for lazy message evaluation.
- `CrashlyticsAntilog` has been replaced with `kermit-crashlytics`.
- `NapierKoinLogger` has been replaced with `kermit-koin`.
- Custom `PrintAntilog` for tests has been replaced with a Kermit `PrintLogWriter`.

chore: Update dependencies and Gradle version

- Upgraded Gradle Wrapper from `9.2.0` to `9.2.1`.
- Bumped various library versions in `libs.versions.toml`, including KSP, Room, and AndroidX libraries.
- Bumped app version to `8.4.7`.
- Enabled Gradle's type-safe project accessors in `settings.gradle.kts`.

chore: Update GitHub Actions and CI scripts

- Updated `actions/checkout` from `v5` to `v6` in all workflows.
- Added caching for Kotlin/Native to the `kmp.yml` workflow.
- Introduced a script to extract the Kotlin version for more precise cache keys.
- Renamed encrypted `keystore.properties.gpg` to `android.keystore.properties.gpg` for clarity.
- Added a `build_quick.sh` script to speed up local builds by excluding iOS-specific tasks.
- Added `desktop.keystore.properties.gpg` and `macOS_development.p12.gpg` to encryption/decryption scripts.

docs: Improve documentation and clean up README

- Moved detailed screenshots from the main `README.md` to a separate `docs/screenshoots/screenshots.md` file.
- Added a `MANUAL_BUILD_INSTALL.md` guide with detailed instructions for all platforms.
- Updated `CONTRIBUTING.md`, `ARCHITECTURE.md`, `AGENTS.md`, and module READMEs to reflect the new logging library and build process changes.

Author: softartdev

.github/scripts/check_secret_integrity.sh

@@ -1,13 +1,12 @@
 #!/bin/sh
 
 echo "28d0921e0d134ac1655c3b93e675ed50aa77233d02966130beff857fb60cf4f6  ./app/android/keystore.properties" | sha256sum -c -
-
 echo "cc018f4fb00ec66cf3b8d918ce4db107945502ab7c47dd0c33fc10e56d79d1a2  ./app/android/note_room_key_store.jks" | sha256sum -c -
-
 echo "58e5bdf33538df1638858d0f8a8bba8161f29b4846a7b6d0aaba3279650aa04a  ./app/android/fastlane/api-7350020584032910214-328107-d8d3807d1e1a.json" | sha256sum -c -
 
 echo "7b9f841129997ddb098e03dd7099a3341dbfa012c31e4cb465b92ddd476cca7a  ./app/iosApp/fastlane/28F5CB4337.json" | sha256sum -c -
-
 echo "e36a29b3964c8bd90030f93ac986a39510185df582a783f1b946e6127a005e38  ./app/iosApp/fastlane/ios_distribution.p12" | sha256sum -c -
-
 echo "4fb66d6fbe9fc4a544303e6e516da2ee3314187e28fc5aacb9631f9b42b511b0  ./app/iosApp/fastlane/NoteDelight_Distribution_Profile.mobileprovision" | sha256sum -c -
+
+echo "5439f53423060953d110cb3217e089b23da20aa7559e80b32767184f2516bba0  ./app/desktop/keystore.properties" | sha256sum -c -
+echo "97f56f5e6e5bcefb738333f22170be94e0196c34958d778067295697a30f5068  ./app/desktop/macOS_development.p12" | sha256sum -c -

.github/scripts/decrypt_secret.sh

@@ -4,7 +4,7 @@
 # --batch to prevent interactive command --yes to assume "yes" for questions
 
 gpg --quiet --batch --yes --decrypt --passphrase="$LARGE_SECRET_PASSPHRASE" \
---output ./app/android/keystore.properties ./.github/secrets/keystore.properties.gpg
+--output ./app/android/keystore.properties ./.github/secrets/android.keystore.properties.gpg
 
 gpg --quiet --batch --yes --decrypt --passphrase="$LARGE_SECRET_PASSPHRASE" \
 --output ./app/android/note_room_key_store.jks ./.github/secrets/note_room_key_store.jks.gpg
@@ -20,3 +20,9 @@ gpg --quiet --batch --yes --decrypt --passphrase="$LARGE_SECRET_PASSPHRASE" \
 
 gpg --quiet --batch --yes --decrypt --passphrase="$LARGE_SECRET_PASSPHRASE" \
 --output ./app/iosApp/fastlane/NoteDelight_Distribution_Profile.mobileprovision ./.github/secrets/NoteDelight_Distribution_Profile.mobileprovision.gpg
+
+gpg --quiet --batch --yes --decrypt --passphrase="$LARGE_SECRET_PASSPHRASE" \
+--output ./app/desktop/keystore.properties ./.github/secrets/desktop.keystore.properties.gpg
+
+gpg --quiet --batch --yes --decrypt --passphrase="$LARGE_SECRET_PASSPHRASE" \
+--output ./app/desktop/macOS_development.p12 ./.github/secrets/macOS_development.p12.gpg

.github/scripts/encrypt_secret.sh

@@ -4,7 +4,7 @@
 # --batch to prevent interactive command --yes to assume "yes" for questions
 
 gpg --symmetric --cipher-algo AES256 --batch --yes --passphrase="$LARGE_SECRET_PASSPHRASE" \
---output ./.github/secrets/keystore.properties.gpg ./app/android/keystore.properties
+--output ./.github/secrets/android.keystore.properties.gpg ./app/android/keystore.properties
 
 gpg --symmetric --cipher-algo AES256 --batch --yes --passphrase="$LARGE_SECRET_PASSPHRASE" \
 --output ./.github/secrets/note_room_key_store.jks.gpg ./app/android/note_room_key_store.jks
@@ -20,3 +20,9 @@ gpg --symmetric --cipher-algo AES256 --batch --yes --passphrase="$LARGE_SECRET_P
 
 gpg --symmetric --cipher-algo AES256 --batch --yes --passphrase="$LARGE_SECRET_PASSPHRASE" \
 --output ./.github/secrets/NoteDelight_Distribution_Profile.mobileprovision.gpg ./app/iosApp/fastlane/NoteDelight_Distribution_Profile.mobileprovision
+
+gpg --symmetric --cipher-algo AES256 --batch --yes --passphrase="$LARGE_SECRET_PASSPHRASE" \
+--output ./.github/secrets/desktop.keystore.properties.gpg ./app/desktop/keystore.properties
+
+gpg --symmetric --cipher-algo AES256 --batch --yes --passphrase="$LARGE_SECRET_PASSPHRASE" \
+--output ./.github/secrets/macOS_development.p12.gpg ./app/desktop/macOS_development.p12

.github/scripts/extract-kotlin-version.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# This script extracts the Kotlin version from gradle/libs.versions.toml
+# and prints it to stdout.
+#
+# It is intended to be used from GitHub Actions to build cache keys that
+# depend only on the Kotlin version.
+
+# Resolve repository root assuming the script is located at .github/scripts/
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+VERSIONS_FILE="$REPO_ROOT/gradle/libs.versions.toml"
+
+if [[ ! -f "$VERSIONS_FILE" ]]; then
+  echo "gradle/libs.versions.toml not found at: $VERSIONS_FILE" >&2
+  exit 1
+fi
+
+# Find the line like: kotlin = "2.2.21"
+LINE="$(grep -E '^kotlin *= *"' "$VERSIONS_FILE" | head -n1 || true)"
+
+if [[ -z "$LINE" ]]; then
+  echo 'Could not find a line with kotlin = "..." in gradle/libs.versions.toml' >&2
+  exit 1
+fi
+
+# Extract the value between quotes
+VERSION="$(sed -E 's/.*"([^"]+)".*/\1/' <<< "$LINE")"
+
+if [[ -z "$VERSION" ]]; then
+  echo 'Failed to extract Kotlin version from line:' >&2
+  echo "$LINE" >&2
+  exit 1
+fi
+
+echo "$VERSION"

.github/scripts/import_macos_dev_id_cert.sh

@@ -0,0 +1,39 @@
+#!/bin/bash
+set -euo pipefail
+
+KEYCHAIN_NAME="build.keychain-db"
+KEYCHAIN_PASSWORD=""
+KEYCHAIN_PATH="$HOME/Library/Keychains/$KEYCHAIN_NAME"
+P12_PATH="./app/desktop/macOS_development.p12"
+
+# Create keychain if it doesn't exist yet
+if [ ! -f "$KEYCHAIN_PATH" ]; then
+  security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_NAME"
+fi
+
+# Make sure keychain doesn't auto-lock during the build
+# -l  : lock after timeout
+# -u  : lock when user logs out
+# -t  : timeout in seconds (here: 6 hours)
+security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
+
+# Add keychain to the search list and make it default for this session
+security list-keychains -s "$KEYCHAIN_PATH" $(security list-keychains | sed 's/[\",]//g')
+security default-keychain -s "$KEYCHAIN_PATH"
+security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+
+# Import Developer ID certificate
+security import "$P12_PATH" \
+  -k "$KEYCHAIN_PATH" \
+  -P "$LARGE_SECRET_PASSPHRASE" \
+  -A \
+  -T /usr/bin/codesign \
+  -T /usr/bin/productbuild \
+  -T /usr/bin/security
+
+# Allow non-interactive access for codesign / productbuild / notarytool
+security set-key-partition-list \
+  -S apple-tool:,apple: \
+  -s \
+  -k "$KEYCHAIN_PASSWORD" \
+  "$KEYCHAIN_PATH"