feat(boltz): Boltz submarine & reverse swaps

.gitignore

@@ -1,5 +1,10 @@
 target/
 bindings/android/native-debug-symbols.zip
+# The xcframework's static libraries exceed GitHub's 100 MB file limit. They are
+# already shipped, compressed, inside BitkitCore.xcframework.zip, which is what
+# Package.swift downloads from the GitHub release, so tracking them here would
+# only duplicate that payload.
+bindings/ios/BitkitCore.xcframework/**/libbitkitcore.a
 .idea/
 .DS_Store
 # AI

CHANGELOG.md

@@ -2,6 +2,7 @@
 
 ## Unreleased
 
+- Swap status updates now reconcile against Boltz's REST status whenever a swap is (re)subscribed, both on `boltz_start_swap_updates` and when `boltz_create_reverse_swap` adds a swap to a running stream. A confirmed reverse-swap lockup is therefore caught up and auto-claimed even when its live WebSocket event was missed (for example because the updates stream was down while the lockup confirmed), instead of the swap silently stalling until a manual claim. No FFI signature change.
 - `onchain_broadcast_raw_tx` now returns the transaction's canonical txid, computed locally in Rust, and treats Electrum "already known / already in mempool / already in block chain" responses as success (returning that same txid). This lets native apps complete Blocktank funding bookkeeping when they retry a broadcast after an ambiguous network failure, without relying on a signer-provided txid. Genuine connectivity failures and unrelated broadcast rejections remain typed `BroadcastError`s, and there is no FFI signature change.
 - Surface a locked Trezor during the THP handshake as the typed `TrezorError::DeviceBusy` instead of a generic connection error, so mobile clients back off and prompt the user to unlock rather than reconnecting in a loop. Backed by `trezor-connect-rs` 0.3.4, which classifies `DeviceLocked` as a distinct, non-retryable state: it no longer churns the transport (close/reopen loop) on a locked device and instead makes a single `try_to_unlock` handshake attempt so the device prompts for unlock.