chore(release): prep v0.1.16 — say plainly which servers Tane talks to

The store listing claimed "No account, no server, no trackers" while the
app was dialling four relays at launch. The app side is fixed; this is
the half a reader sees.

- Store description, both locales: the false line is gone, and a new
  "Sharing needs the internet" block names relay.comunes.org (ours),
  nos.lol, relay.damus.io and relay.primal.net, says when Tane talks to
  them, what they can see (a key and an IP — no name, no account), and
  where to switch any or all of them off, or point Tane at your own.
  Deliberately plain: no protocol names, no jargon. The audience is
  gardeners; the technical detail belongs in the F-Droid thread.
- The same correction on the landing page (feature card, FAQ, status).
- 0.1.16+18, so the F-Droid recipe's versionCodes become 181/182/183.
  F-Droid reads fastlane metadata from the checkout of the newest built
  version, so the description only reaches it via a new release.

The recipe mirror's `commit:` still points at v0.1.15 — it needs a hash
that does not exist yet, and is synced here and in the fdroiddata fork
once v0.1.16 is tagged.

apps/app_seeds/fastlane/metadata/android/en-US/changelogs/18.txt

@@ -0,0 +1 @@
+Tane now stays completely offline until you join the sharing part — it no longer contacts any server on its own. The store description finally says which community servers it talks to, what they can see, and how to change them or switch them all off.

apps/app_seeds/fastlane/metadata/android/en-US/full_description.txt

@@ -13,8 +13,11 @@ MANAGE YOUR BANK
 • Search and filter; snap a photo now and name it later.
 
 YOURS, AND ONLY YOURS
-• Works fully offline. No account, no server, no trackers.
+• Your seed book works with no internet at all. What you write stays on your
+  phone; nothing goes out unless you put some of your seeds up for sharing, or
+  write to someone.
 • Everything is encrypted at rest on your device.
+• No account, no sign-up, no ads, no trackers.
 • Save an encrypted backup and keep a printed recovery sheet — restore your
   whole bank on a new device.
 
@@ -22,6 +25,26 @@ SHARE, THE WAY IT'S ALWAYS BEEN DONE
 • Mark what you have spare to give away, swap or sell.
 • Print a catalog of what you share to take to a seed fair.
 
+SHARING NEEDS THE INTERNET
+Keeping your seed book needs nothing but your phone. Sharing does need a
+connection: to get an offer or a message across to someone, Tane leaves it on
+community servers — machines run by people, not by a company. Tane comes with
+four: relay.comunes.org, which Asociación Comunes runs (the same people who make
+Tane), plus three public ones that others already use — nos.lol, relay.damus.io
+and relay.primal.net.
+
+Tane only talks to them once you join the sharing part and agree to the
+community rules. Before that it doesn't connect to anything, and messaging stays
+switched off. Once you join, those servers see the key that stands for you and
+the address your phone connects from — no name, no email, no account. Your seed
+book itself is never sent anywhere.
+
+You stay in charge of that list of servers. In the sharing setup you can switch
+off any server on it, switch off every one of them — Tane then goes back to
+being a seed book that never connects — or add the address of a different
+server. Anyone can run a server of their own, and Tane works just as well with
+it.
+
 Tane is free software (AGPL-3.0). No ads, no commissions, no business model
 — it exists to support traditional varieties and push back against the seed
 monopoly.

apps/app_seeds/fastlane/metadata/android/es-ES/changelogs/18.txt

@@ -0,0 +1 @@
+Tane ya no se conecta a ningún servidor por su cuenta: se queda completamente sin conexión hasta que entras en la parte de compartir. Y la descripción de la tienda por fin dice con qué servidores comunitarios habla, qué pueden ver y cómo cambiarlos o desactivarlos todos.

apps/app_seeds/fastlane/metadata/android/es-ES/full_description.txt

@@ -13,8 +13,11 @@ GESTIONA TU BANCO
 • Busca y filtra; haz una foto ahora y ponle nombre después.
 
 TUYO, Y SOLO TUYO
-• Funciona totalmente sin conexión. Sin cuenta, sin servidor, sin rastreadores.
+• Tu cuaderno de semillas funciona sin nada de internet. Lo que escribes se
+  queda en el móvil; no sale nada salvo que pongas a compartir parte de tus
+  semillas o le escribas a alguien.
 • Todo va cifrado en tu dispositivo.
+• Sin cuenta, sin registro, sin anuncios, sin rastreadores.
 • Guarda una copia cifrada y ten una hoja de recuperación impresa: recupera
   todo tu banco en un dispositivo nuevo.
 
@@ -22,6 +25,25 @@ COMPARTIR, COMO SE HA HECHO SIEMPRE
 • Marca lo que te sobra para regalar, intercambiar o vender.
 • Imprime un catálogo de lo que compartes para llevar a una feria de semillas.
 
+COMPARTIR SÍ NECESITA INTERNET
+Para llevar tu cuaderno de semillas no hace falta más que el móvil. Compartir sí
+necesita conexión: para que una oferta o un mensaje le lleguen a otra persona,
+Tane los deja en servidores comunitarios, máquinas que lleva gente, no una
+empresa. Tane viene con cuatro: relay.comunes.org, que lleva la Asociación
+Comunes (la misma gente que hace Tane), y tres públicos que ya usa otra gente:
+nos.lol, relay.damus.io y relay.primal.net.
+
+Tane solo habla con ellos cuando entras en la parte de compartir y aceptas las
+normas de la comunidad. Antes de eso no se conecta a nada, y la mensajería está
+apagada. Cuando entras, esos servidores ven la clave que te representa y la
+dirección desde la que se conecta tu móvil: ni nombre, ni correo, ni cuenta. Tu
+cuaderno de semillas no se envía nunca a ningún sitio.
+
+Tú mandas sobre esa lista de servidores. En la configuración de compartir puedes
+desactivar el servidor que quieras, desactivarlos todos —y Tane vuelve a ser un
+cuaderno que no se conecta nunca— o añadir la dirección de otro servidor.
+Cualquiera puede montar su propio servidor, y Tane funciona igual de bien con él.
+
 Tane es software libre (AGPL-3.0). Sin anuncios, sin comisiones, sin modelo
 de negocio: existe para apoyar las variedades tradicionales y plantar cara al
 monopolio de las semillas.

apps/app_seeds/pubspec.yaml

@@ -1,7 +1,7 @@
 name: tane
 description: "Tane — local-first, encrypted, decentralized traditional-seed inventory and market."
 publish_to: 'none'
-version: 0.1.15+17
+version: 0.1.16+18
 
 environment:
   sdk: ^3.11.5

docs/fdroid/org.comunes.tane.yml

@@ -16,8 +16,8 @@ RepoType: git
 Repo: https://git.comunes.org/comunes/tane.git
 
 Builds:
-  - versionName: 0.1.15
+  - versionName: 0.1.16
-    versionCode: 171
+    versionCode: 181
     commit: f04dd3da1a3993c5a8f3222544f75b979d2c7f9d
     subdir: apps/app_seeds
     output: build/app/outputs/flutter-apk/app-armeabi-v7a-release.apk
@@ -53,8 +53,8 @@ Builds:
         $PUB_CACHE/hosted/pub.dev/flutter_tesseract_ocr-0.4.31/android/libs/tesseract4android-release.aar
       - $$flutter$$/bin/flutter build apk --release --split-per-abi --target-platform=android-arm
 
-  - versionName: 0.1.15
+  - versionName: 0.1.16
-    versionCode: 172
+    versionCode: 182
     commit: f04dd3da1a3993c5a8f3222544f75b979d2c7f9d
     subdir: apps/app_seeds
     output: build/app/outputs/flutter-apk/app-arm64-v8a-release.apk
@@ -90,8 +90,8 @@ Builds:
         $PUB_CACHE/hosted/pub.dev/flutter_tesseract_ocr-0.4.31/android/libs/tesseract4android-release.aar
       - $$flutter$$/bin/flutter build apk --release --split-per-abi --target-platform=android-arm64
 
-  - versionName: 0.1.15
+  - versionName: 0.1.16
-    versionCode: 173
+    versionCode: 183
     commit: f04dd3da1a3993c5a8f3222544f75b979d2c7f9d
     subdir: apps/app_seeds
     output: build/app/outputs/flutter-apk/app-x86_64-release.apk
@@ -131,8 +131,10 @@ Builds:
 # our own signed APK on the git.comunes.org release byte-for-byte, publishes OUR
 # APK (same signature as the Play build). Value is the SHA-256 of the tane-upload
 # signing certificate (public).
-# Note: `commit:` must be a full commit hash (not a tag) per F-Droid review;
+# Note: `commit:` must be a full commit hash (not a tag) per F-Droid review, so
-# f04dd3da1a3993c5a8f3222544f75b979d2c7f9d is the commit tag v0.1.15 points to.
+# it can only be filled in once the tag exists. The hash below still points at
+# v0.1.15; it is synced (here and in the fdroiddata fork) right after v0.1.16 is
+# tagged, before the fork's pipeline runs.
 AllowedAPKSigningKeys: ddfae432091b8248a8a4a1b353487fa626301f4357ef835e94ec312f69418e38
 
 AutoUpdateMode: Version
@@ -143,5 +145,5 @@ VercodeOperation:
   - '%c * 10 + 3'
 UpdateCheckData:
   apps/app_seeds/pubspec.yaml|version:\s*[\d.]+\+(\d+)|apps/app_seeds/pubspec.yaml|version:\s*([\d.]+)\+
-CurrentVersion: 0.1.15
+CurrentVersion: 0.1.16
-CurrentVersionCode: 173
+CurrentVersionCode: 183

site/content/_index.en.md

@@ -16,7 +16,7 @@ pillars:
     body: "Add a seed or seedling with just a photo and a name — no Latin required. Note the year, how much you have, where it came from, germination tests. Search, filter, snap now and name later."
   - icon: "🔒"
     title: "Yours, and only yours"
-    body: "Works fully offline. No account, no server, no trackers. Everything is encrypted on your device. Keep an encrypted backup and a printed recovery sheet to restore your whole bank on a new device."
+    body: "Your seed book works with no internet at all, and Tane doesn't connect to anything until you join the sharing part. No account, no sign-up, no trackers. Everything is encrypted on your device. Keep an encrypted backup and a printed recovery sheet to restore your whole bank on a new device."
   - icon: "🤝"
     title: "Share, as it's always been done"
     body: "Mark what you have spare to give away, swap or sell. Someone nearby finds it and contacts you — no middleman. Print a catalog of what you share to take to a seed fair."

site/content/_index.es.md

@@ -16,7 +16,7 @@ pillars:
     body: "Añade una semilla o plantón con solo una foto y un nombre; sin latín. Anota el año, cuánta tienes, de dónde viene, pruebas de germinación. Busca, filtra, haz la foto ahora y ponle nombre después."
   - icon: "🔒"
     title: "Tuyo, y solo tuyo"
-    body: "Funciona totalmente sin conexión. Sin cuenta, sin servidor, sin rastreadores. Todo va cifrado en tu dispositivo. Guarda una copia cifrada y una hoja de recuperación impresa para restaurar todo tu banco en un dispositivo nuevo."
+    body: "Tu cuaderno de semillas funciona sin nada de internet, y Tane no se conecta a nada hasta que entras en la parte de compartir. Sin cuenta, sin registro, sin rastreadores. Todo va cifrado en tu dispositivo. Guarda una copia cifrada y una hoja de recuperación impresa para restaurar todo tu banco en un dispositivo nuevo."
   - icon: "🤝"
     title: "Compartir, como se ha hecho siempre"
     body: "Marca lo que te sobra para regalar, intercambiar o vender. Alguien cerca lo encuentra y te contacta, sin intermediarios. Imprime un catálogo de lo que compartes para llevar a una feria de semillas."

site/i18n/en.json

@@ -45,7 +45,7 @@
     "other": "Where Tane is right now"
   },
   "statusBody": {
-    "other": "The inventory works today: keep your seeds offline, encrypted, with no account. The neighbourly sharing layer — offers, messaging and trust — is now arriving, in beta. Everything already works with zero network."
+    "other": "The inventory works today: keep your seeds offline, encrypted, with no account — the app doesn't connect to anything until you join the sharing part. The neighbourly sharing layer — offers, messaging and trust — is now arriving, in beta."
   },
   "screenCapHome": {
     "other": "Home — your bank and the market, one tap away"
@@ -114,7 +114,7 @@
     "other": "Do I need an account?"
   },
   "faqAccountA": {
-    "other": "No account, no sign-up, no server. Your data stays on your device."
+    "other": "No account and no sign-up. Your seeds stay on your device, and Tane doesn't connect to anything until you join the sharing part — then it uses community servers you can change or switch off."
   },
   "faqOfflineQ": {
     "other": "Does it work offline?"

site/i18n/es.json

@@ -45,7 +45,7 @@
     "other": "En qué punto está Tane"
   },
   "statusBody": {
-    "other": "El inventario ya funciona: guarda tus semillas sin conexión, cifradas y sin cuenta. La capa de intercambio vecinal —ofertas, mensajería y confianza— está llegando ya, en beta. Todo funciona sin ninguna red."
+    "other": "El inventario ya funciona: guarda tus semillas sin conexión, cifradas y sin cuenta; la app no se conecta a nada hasta que entras en la parte de compartir. La capa de intercambio vecinal —ofertas, mensajería y confianza— está llegando ya, en beta."
   },
   "screenCapHome": {
     "other": "Inicio — tu banco y el mercado a un toque"
@@ -114,7 +114,7 @@
     "other": "¿Necesito cuenta?"
   },
   "faqAccountA": {
-    "other": "Sin cuenta, sin registro, sin servidor. Tus datos se quedan en tu dispositivo."
+    "other": "Sin cuenta y sin registro. Tus semillas se quedan en tu dispositivo, y Tane no se conecta a nada hasta que entras en la parte de compartir; entonces usa servidores comunitarios que puedes cambiar o desactivar."
   },
   "faqOfflineQ": {
     "other": "¿Funciona sin conexión?"