feat: point third-party mode at upstream Yu9191 modules

- subscription URLs now resolve directly to upstream modules (gh-proxy
  mirror / raw), dropping project-owned module and script copies
- remove Resources/ThirdPartyProxyModules and ThirdParty/WlocScripts,
  their pbxproj references, and the contract-test module checks
- third-party save sends lon/lat/acc matching the upstream settings
  script; motion-state simulation is unavailable (upstream lacks it)
- surface the iOS 27 beta 6 gs-loc MITM limitation in the app setup and
  README (zh/en)

ThirdParty/WlocScripts/test/bundle-compatibility.test.js

@@ -1,52 +0,0 @@
-import test from "node:test";
-import assert from "node:assert/strict";
-import { readFile } from "node:fs/promises";
-import vm from "node:vm";
-
-const bundles = [
-  new URL("../dist/v1/wloc.js", import.meta.url),
-  new URL("../dist/v1/wloc-settings.js", import.meta.url)
-];
-
-test("generated bundles avoid newer JavaScriptCore runtime requirements", async () => {
-  for (const bundle of bundles) {
-    const source = await readFile(bundle, "utf8");
-    for (const unsupported of [
-      /\bBigInt\b/,
-      /\bglobalThis\b/,
-      /\bURLSearchParams\b/,
-      /\bObject\.fromEntries\b/,
-      /\?\./,
-      /\?\?/
-    ]) {
-      assert.equal(unsupported.test(source), false, `${bundle.pathname} contains ${unsupported}`);
-    }
-  }
-});
-
-test("settings bundle runs without modern URL and text globals", async () => {
-  const source = await readFile(bundles[1], "utf8");
-  let result;
-  const storage = new Map();
-  vm.runInNewContext(source, {
-    $rocket: {},
-    $request: {
-      url: "https://gs-loc.apple.com/wloc-settings/save?lon=121.1&lat=31.2&acc=25"
-    },
-    $persistentStore: {
-      read: (key) => storage.get(key) || null,
-      write: (value, key) => {
-        storage.set(key, value);
-        return true;
-      }
-    },
-    $done: (value) => { result = value; },
-    JSON,
-    Number,
-    Object,
-    String,
-    decodeURIComponent
-  });
-
-  assert.equal(JSON.parse(result.response.body).success, true);
-});