fix: survive corrupt preferences at startup; drop CocoaPods leftovers

A black window on launch, no error anywhere: main() awaited
loadPersistedEndpoint before the first frame, and
SharedPreferences.getBool threw 'int is not a subtype of bool?' —
the store is writable from outside the app and hub.secure had been
written as int 0. Pref reads now go through defensive typed helpers
(int coerces to bool, wrong types fall back to defaults), and every
pre-frame restore step is failure-isolated: a broken store can cost
a preference, never the first frame. Regression tests stage the
corrupt store (the exact observed value and worse).

Also removes the CocoaPods leftovers from the macOS project
(Podfile, [CP] script phases, Pods framework references, xcconfig
includes): the project builds via Swift Package Manager, and the
dual wiring ran both dependency managers on every build — Flutter's
persistent 'removing CocoaPods will improve build time' warning.
Verified: clean profile build produces a launchable bundle (plugins
statically linked via SwiftPM), suite green, analyze clean.

Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>

lib/data/hub.dart

@@ -106,14 +106,39 @@ class HubService {
   /// from "caller passed null to drop the token".
   static const Object _unset = Object();
 
+  /// Defensive typed preference reads. `shared_preferences` THROWS
+  /// on a type mismatch — and the store is writable from outside
+  /// the app (`defaults write` puts an int where a bool belongs).
+  /// A corrupt preference must never take the app down with it
+  /// (a thrown startup read = black window before the first
+  /// frame); the worst allowed outcome is the built-in default.
+  static String? _prefString(SharedPreferences prefs, String key) {
+    final v = prefs.get(key);
+    return v is String ? v : null;
+  }
+
+  static int? _prefInt(SharedPreferences prefs, String key) {
+    final v = prefs.get(key);
+    if (v is int) return v;
+    if (v is bool) return v ? 1 : 0;
+    return null;
+  }
+
+  static bool? _prefBool(SharedPreferences prefs, String key) {
+    final v = prefs.get(key);
+    if (v is bool) return v;
+    if (v is int) return v != 0;
+    return null;
+  }
+
   /// Read persisted endpoint + auth token, then reconnect.
   /// Called once at app start; safe to call again after the
   /// operator updates the token in Settings.
   Future<void> loadPersistedEndpoint() async {
     final prefs = await SharedPreferences.getInstance();
-    final host = prefs.getString(_kHostKey);
-    final port = prefs.getInt(_kPortKey);
-    final secure = prefs.getBool(_kSecureKey);
+    final host = _prefString(prefs, _kHostKey);
+    final port = _prefInt(prefs, _kPortKey);
+    final secure = _prefBool(prefs, _kSecureKey);
     final token = await HubAuthToken.read();
 
     // 1) An endpoint the operator explicitly chose in Settings wins.
@@ -202,7 +227,7 @@ class HubService {
   /// initial app startup. Defaults to system.
   Future<ThemeModeValue> loadThemeMode() async {
     final prefs = await SharedPreferences.getInstance();
-    final raw = prefs.getString(_kThemeKey);
+    final raw = _prefString(prefs, _kThemeKey);
     return ThemeModeValue.fromWire(raw) ?? ThemeModeValue.system;
   }
 
@@ -217,7 +242,7 @@ class HubService {
   /// English; the sidebar toggle flips to German on demand.
   Future<Locale> loadLocale() async {
     final prefs = await SharedPreferences.getInstance();
-    final raw = prefs.getString(_kLocaleKey);
+    final raw = _prefString(prefs, _kLocaleKey);
     if (raw == 'de') return const Locale('de');
     return const Locale('en');
   }