v1.3.0: per-deployment concurrency, ABI-split APKs, ONLY-mode fix

Rolls up the four post-v1.2.14 commits on main into a single tagged
release. Highlights:

- Per-deployment concurrency (#142): each deployment ID gets its own
  30-permit semaphore, so setups with deployments across multiple
  Google accounts get a genuine 30×N throughput ceiling. Single-account
  setups still cap at Google's per-account 30-simultaneous limit —
  docs (EN + FA) updated to call that out.
- Android app-splitting ONLY-mode bug fix (#143): the previous code
  called both addAllowedApplication and addDisallowedApplication,
  which Android documents as mutually exclusive. ONLY mode was
  silently failing establish(). Now fixed.
- Per-ABI Android APKs (#136): ships four split APKs (arm64-v8a ~21 MB,
  armeabi-v7a ~18 MB, x86_64 ~23 MB, x86 ~22 MB) alongside the ~53 MB
  universal. Huge distribution win for users on unreliable
  censorship-tunnel paths — the 21 MB arm64-v8a download succeeds
  where the universal doesn't.
- Honest IP-exposure note in Security Posture (#148): clarified that
  v1.2.9's forwarded-header stripping only covers the client-side leg;
  what Google's own infrastructure may add on the UrlFetchApp.fetch()
  second leg is outside this client's control. Full Tunnel mode is
  the recommendation for threat models where that matters.
- Telegram release-post format: added Persian preambles above both
  links (GitHub repo + full Persian guide; release page + desktop/
  router builds) so channel readers see the intent at a glance.

82 tests pass. Desktop + Android builds both verified clean locally
across the v1.2.15+ commit series.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.github/scripts/telegram_release_notify.py

@@ -179,10 +179,21 @@ def main() -> int:
 
     ver = args.version
     sha = sha256_of(args.apk)
+    # Caption structure requested by the repo owner:
+    #   1. Title + SHA-256 (as before)
+    #   2. Persian preamble labelling the repo link as
+    #      "GitHub repo + full Persian guide"
+    #   3. Repo URL
+    #   4. Persian preamble labelling the release link as
+    #      "this version's release — desktop/router builds live here"
+    #   5. Release URL
+    # Keeps total well under Telegram's 1024-char caption limit.
     caption = (
         f"<b>mhrv-rs Android v{ver}</b>\n\n"
-        f"SHA-256: <code>{sha}</code>\n"
-        f"https://github.com/{args.repo}\n"
+        f"SHA-256: <code>{sha}</code>\n\n"
+        f"مخزن گیتهاب  + مطالعه راهنمای کامل فارسی:\n"
+        f"https://github.com/{args.repo}\n\n"
+        f"لینک به این نسخه جهت دریافت نسخه های مربوط به مودم و کامپیوتر:\n"
         f"https://github.com/{args.repo}/releases/tag/v{ver}"
     )