Summary

• migrate SlamDih UserDefaults and custom sound files into the SlamX domain on launch
• split OSV CI into full scheduled/push scans and PR delta scans using the official reusable workflows
• remove the unsupported Dependency Review job until the repo Dependency Graph setting supports it
• add a release asset script that emits SlamX-named DMG, checksum, appcast, and source archives

Verification

• swift test
• ruby YAML parse for .github/workflows/ci.yml
• bash -n scripts/create-release-assets.sh scripts/create-dmg.sh scripts/package-app.sh scripts/generate-appcast.sh

Notes

The current v0.3.0 GitHub release points at a pre-rename commit and its assets are SlamDih-named. This PR should be merged before publishing the next corrective release.