chore(release): bump to 1.2.7 with Amber intent-signing fix + release notes

Co-authored-by: shakespeare.diy <assistant@shakespeare.diy>

package.json

@@ -1,7 +1,7 @@
 {
   "name": "skate-spots",
   "private": true,
-  "version": "1.2.6",
+  "version": "1.2.7",
   "type": "module",
   "homepage": "https://skate-spots.com",
   "scripts": {

release-notes.txt

@@ -1,22 +1,24 @@
-v1.2.4
+v1.2.7
 
-🛠️ Amber signing no longer hangs into the void (for real this time)
-When you signed or published through Amber, a quirky reply from the signer app
-could leave the app spinning forever with no feedback. We now validate exactly
-what Amber sends back, rebuild the event safely, and — if something's genuinely
-wrong — surface a clear, tappable error you can retry instead of a frozen
-screen. Publishing a crew, a spot or a message goes through cleanly.
+🛠️ Amber finally pops up — signing works
+The big one. On some Android setups (notably GrapheneOS), tapping delete,
+accepting a crew invite, sending a zap, or editing your profile would spin
+forever and Amber never appeared. Under the hood the app was asking Amber
+through a silent background channel that stalls on locked-down devices.
 
-📤 Uploads that don't get stuck
-Logo and image uploads used to lean on a single host — if it was slow, so were
-you. Uploads now fall back across multiple servers, so a sluggish host no
-longer stalls the whole thing.
+Now every signing and encryption action launches Amber's approval screen
+directly (the same reliable path login already used) and hands the result
+straight back to the app — so the action completes instead of hanging. If
+Amber genuinely doesn't respond, you get a clear "open Amber and approve"
+message in seconds instead of an endless spinner.
 
-🔒 Safer links
-Website links on food spots, shops and tour stops are now sanitized before they
-open, blocking sketchy non-web links. Small under-the-hood hardening, zero
-change to how you use the app.
+IMPORTANT: after updating, log OUT and log back IN once so Amber re-grants
+the signing permission. Then delete/accept/zap will just work.
+
+🔔 Notification bell "Mark read" actually clears the badge
+Marking notifications read now clears the count for crew items too, while
+your pending invites and requests stay visible in the Crews tab until you
+act on them.
 
 🧹 Housekeeping
-Behind-the-scenes fixes and a full pass over the app's buttons, routes and
-flows to keep everything wired up and responsive.
+Behind-the-scenes reliability fixes across the signing and notification flows.