Release GSwitch 1.0.23

[squarepots]

Release the first-use account setup in #175 as GSwitch 1.0.23. This PR changes only the four synchronized version files. The release is published as Latest: https://github.com/ginbing/GSwitch/releases/tag/v1.0.23.

Accepted preview and validation

• Product source: 3d9d1a6d1f0869dca466583fb90c62f13febba3a, merged as 022a1a561a28193ee53cc79815dce9b6274c7e2a with an identical tree.
• Windows preview: 1.0.23-rc.1, built from clean committed source. Installer: C:/Users/zhu13/Desktop/Github/GSwitch/src-tauri/target/first-use-preview/GSwitch_1.0.23-rc.1_x64-setup.exe.
• Preview SHA256: dc91699e9b2f8c3ff89469dcf4741e2230f36f877206ba08bd8854338caf3214. Build, version metadata, NSIS payload, and native production bridge checks are recorded in Simplify first-use account setup and browser icons #175.
• The maintainer accepted the clickable preview, requested build and merge, then requested this public release in the current conversation.
• Product validation: 153 frontend tests, TypeScript/production build, and fictional-account walkthroughs in English and Chinese, light and dark themes, and default and minimum window sizes.
• Version synchronization, version consistency, and diff checks passed. The version PR passed all live required checks before merge.

Real-account acceptance waiver

The maintainer's explicit real-account acceptance waiver in the accepted implementation plan persists for this conversation. Real OAuth, installed Codex, live account switching, quota, Wake, and recovery were not exercised and are not claimed as validated. No real reset credits or other billable provider actions were used.

Completed release proof

• Release commit and annotated tag: aa9dedfb7c32b61b2e5fe79a36bd582575aa2460, v1.0.23. Commit and tag authorship use squarepots, without tool attribution. The release source differs from the accepted preview only in the four version files.
• Exact-main CI and CodeQL passed before tagging. Linux source proof includes 174 passed Rust tests and one configured ignored test.
• The existing production release workflow passed all jobs: four builds, Windows install/version/uninstall, both macOS DMG/archive checks, Linux payload checks, five updater signature verifications, SBOM and provenance, and downloaded draft verification.
• All 14 draft assets were downloaded and checked locally against their exact sizes and GitHub SHA256 digests. The updater manifest and CycloneDX SBOM passed the repository verifier; the SBOM contains 253 npm and 668 Cargo components. Every downloaded asset's provenance was verified against the exact source digest, tag, and release workflow.
• Production Windows installer SHA256: a756ee7fe246ec9c61ead26b7f29316abd22f1e8d3acd5067a0ef9ce8f114f50.
• Reviewed bilingual release notes and unchanged assets were confirmed before publication as Latest. The public updater endpoint returned HTTP 200, version 1.0.23, and the exact verified manifest SHA256 85656680836decfed55d7531cd067d341717e4406418bf03ecd192e93807c0e6.