fix(android): 审查修复 — Kotlin编译错误+SHA256校验+权限检查

- PackageInstallerModule: fsync作用域修复, PendingIntent改用getLaunchIntentForPackage, 权限预检
- updater: expo-crypto SHA256校验, getLocalBuildTag优先级修正, parseVersion null安全
- ManifestBuild: 增加type字段(js/apk)替代size启发式
- app.json: fallbackToCacheTimeout 0→3000
- shared: catch静默→console.warn

packages/shared/src/updater/index.ts

@@ -18,6 +18,7 @@ export interface ManifestBuild {
   url: string;
   sha256: string;
   size: number;
+  type: 'js' | 'apk';
   minVersion?: string;
 }
 
@@ -67,7 +68,8 @@ export async function checkUpdate(
       build,
       remoteVersion,
     };
-  } catch {
+  } catch (e) {
+    console.warn('[GCA] checkUpdate 失败:', e);
     return { shouldUpdate: false, build: null, remoteVersion: null };
   }
 }