v0.1.5 — settings.gradle repo support + exact iOS SDK pin (competitor-audit hardening)

[KAMRONBEK]

Hardening surfaced by auditing the 5 competing RN MyID wrappers' published source. None had filed GitHub issues (0–3★ projects), so the scan read their code for latent bugs, then verified each pattern against ours — 12 of 22 patterns were already handled correctly here. These are the 2 that genuinely applied.

Fixed

• Config plugin now works under modern Gradle repo centralization. The MyID Maven repo was only injected into the root build.gradle allprojects block — which repositoriesMode = FAIL_ON_PROJECT_REPOS rejects (build failure), and which is a silent no-op on settings.gradle-only templates. Now: inject into settings.gradle dependencyResolutionManagement.repositories when that block exists (and skip the allprojects injection so it can't trip FAIL_ON_PROJECT_REPOS); keep the allprojects path for older templates; warn at prebuild instead of silently shipping an unresolvable build when neither exists. New pure helpers are unit-tested (5 new tests).
• iOS MyIdSDK pinned to exact 3.1.3 (was ~> 3.1.3), so an untested MyID patch can't float into a build — matching the exact Android pin and the library's "never floated" guarantee. (iOS 3.1.3 vs Android 3.1.9 differ by design — MyID versions the two platform SDKs independently.)
• Synced the stale podspec/gradle module versions (0.1.0 → 0.1.5).

Considered and declined (reported to maintainer)

• iOS AVCaptureDevice preflight — the SDK already reports denial (code 102 → permission); our own preflight risks UX conflict and needs on-device validation.
• Watchdog timeout — guards a hypothetical never-firing callback; an arbitrary ceiling could abort a legitimately slow liveness, and a JS-only version reintroduces the native wedge fixed in 0.1.4.
• Remove the 100 ms iOS launch delay — it's a deliberate anti-presentation-race beat validated by the 6/6 on-device E2E; removing needs device testing.
• Sourcemaps in the tarball — harmless (MIT/open source), common for Expo modules.

Verification

Local: lint · typecheck · build · plugin build · 37/37 tests (5 new) green; README EN/RU/UZ hold 429-line parity; all version fields consistent at 0.1.5. CI's iOS (pod install resolves exact 3.1.3) and Android (prebuild + assembleDebug, default template → unchanged allprojects path) gates validate the native side.