chore: Release 1.0.5

[onesignal-deploy]

Channels: Current

🛠️ Native Dependency Updates

• Update Android SDK from 5.9.1 to 5.9.2
  • fix: [SDK-4388] subscription state permanently stuck at "Never Subscribed" when login() is called before requestPermission() (#2627)
  • fix: [SDK-4474] self-heal SDK-4388-stuck push subscriptions on session start (#2636)

[claude]

Straightforward release bump (1.0.5) — Android SDK 5.9.1→5.9.2 and matching sdkVersion/package.json updates.

Extended reasoning...

Overview

This PR bumps the plugin to version 1.0.5. The changes are: Android OneSignal SDK dependency bumped from 5.9.1 to 5.9.2 in libs.versions.toml, the OneSignalWrapper.sdkVersion string updated from 010004 to 010005 in both the Android Kotlin plugin and iOS Swift plugin, and the npm package.json version bumped from 1.0.4 to 1.0.5. All four edits are mechanical and consistent with each other.

Security risks

None. No logic, auth, crypto, or data-handling code was modified. The upstream Android SDK changes referenced (SDK-4388 / SDK-4474) are subscription-state self-healing fixes that don't introduce new attack surface to this plugin.

Level of scrutiny

Low. This is a release-cut PR with only version-string updates and a patch-level native dependency bump. The four version identifiers are all consistent (1.0.5 / 010005 / 5.9.2), no plugin code paths changed, and the bug-hunting system found nothing.

Other factors

No outstanding reviewer comments, no prior reviews from me on this PR, and the release pattern matches prior releases in this repo (e.g., commit 9582f9e / eedffdf). Approving.