fix: align Photos crawler control contract

[steipete]

Summary

• align the coming-soon Photos manifest with the current public photoscrawl control metadata
• replace the unadvertised refresh action with the upstream init action
• remove the unused library setting and lock the contract with self-test assertions
• correct the unreleased changelog description

Follow-up to #20. No release, version, tag, formula, or publish action is included.

Contract proof

• openclaw/photoscrawl@88aa4de67544aa05542b74a286037b48ac0fd6e4 metadata: identity, platform paths, privacy, status/init/query commands verified
• current photoscrawl help: crawl and search flags verified; no release or openclaw/tap/photoscrawl formula exists
• confidential-identifier scan: all categories PASS

Validation

• swift build
• swift run crawlbar-selftest
• 11-app debug CLI config/metadata smoke
• packaged app build and strict codesign verification
• packaged helper config, 11-app, Photos metadata, and install-gate smoke
• structured autoreview: clean after addressing the accepted contract finding

swift test reports that this package has no XCTest target; repository contract tests live in crawlbar-selftest.

[clawsweeper]

ClawSweeper status: review started.

I am starting a fresh review of this pull request: fix: align Photos crawler control contract This is item 1/1 in the current shard. Shard 0/1.

This placeholder means the worker is alive and reading the current context. I will edit this same comment with the actual review when the claws are done clicking.

Crustacean status: shell secured, claws on keyboard, evidence pebbles being sorted.

[steipete]

Landed in dcb3437b49ee7821e2eb7c6a6217f7b59db6151e.

Proof:

• swift build
• swift run crawlbar-selftest
• debug CLI: 11 unique built-ins; Photos disabled/coming-soon; metadata matches status/init/query and supported capabilities
• Scripts/package_app.sh
• codesign --verify --deep --strict --verbose=2 dist/CrawlBar.app
• packaged helper: config validation, 11-app smoke, Photos metadata contract, and unavailable-install gate
• public photoscrawl metadata --json and command help checked at 88aa4de67544aa05542b74a286037b48ac0fd6e4; paths/privacy/identity matched; no release or tap formula exists
• confidential-identifier scan: all categories PASS
• structured autoreview: clean after the accepted contract fix
• PR-head Swift CI and security checks: green
• exact merged-head Swift CI: run 27827172016, green

Caveat: swift test reports no XCTest target; this repository’s executable contract suite is crawlbar-selftest. No release/version/tag/publish action performed.