Pocket Poster 3.3.0: worse_query port for iOS 26-27.2

- Replace bad_query with forcequitOS/worse_query (App Group based)
- Read the App Group from the code signature entitlements
- Add pathleak container enumeration and iOS 27 system container lookup
- Route descriptor/CarPlay writes through worse_query
- Add sign_personal.sh and POCKET_POSTER_SELFTEST diagnostics
- Keep bad_query as an iOS 26 fallback

Pocket Poster/Controllers/CarPlayWallpaper+CarPlayManager.swift

@@ -139,16 +139,16 @@ class CarPlayManager {
         }
         
         let cacheRel = "\(appHash)/Library/Caches/MappedImageCache/com.apple.CarPlayApp.wallpaper-images"
-        if SymHandler.prefersBadQuery {
-            let destPath = BadQuery.carPlayCachePath(appHash: appHash)
+        if SymHandler.prefersSandboxEscape {
+            let destPath = SandboxEscape.carPlayCachePath(appHash: appHash)
             do {
-                try SymHandler.writeFilesViaBadQuery(toDirectory: destPath, files: toRemove)
+                try SymHandler.writeFilesViaEscape(toDirectory: destPath, files: toRemove)
                 // remove local staging copies after successful write
                 for imgURL in toRemove {
                     try? FileManager.default.removeItem(at: imgURL)
                 }
             } catch {
-                print("bad_query CarPlay failed, falling back to symlink: \(error)")
+                print("worse_query CarPlay failed, falling back to symlink: \(error)")
                 let _ = try SymHandler.createAppSymlink(for: cacheRel)
                 for imgURL in toRemove {
                     try FileManager.default.trashItem(at: imgURL, resultingItemURL: nil)