Pocket Poster 3.3.0: worse_query port for iOS 26-27.2

- Replace bad_query with forcequitOS/worse_query (App Group based)
- Read the App Group from the code signature entitlements
- Add pathleak container enumeration and iOS 27 system container lookup
- Route descriptor/CarPlay writes through worse_query
- Add sign_personal.sh and POCKET_POSTER_SELFTEST diagnostics
- Keep bad_query as an iOS 26 fallback

Pocket Poster/Views/ContentView.swift

@@ -58,12 +58,12 @@ struct ContentView: View {
                 }
                 
                 Section {
-                    if pbHash == "" && !SymHandler.prefersBadQuery {
+                    if pbHash == "" && !SymHandler.prefersSandboxEscape {
                         Text("Enter your PosterBoard app hash in Settings.")
                     } else {
                         VStack {
-                            if pbHash == "" && SymHandler.prefersBadQuery {
-                                Text("No hash set — will auto-detect via bad_query on Apply.")
+                            if pbHash == "" && SymHandler.prefersSandboxEscape {
+                                Text("No hash set — will auto-detect via worse_query on Apply.")
                                     .font(.caption)
                                     .foregroundStyle(.secondary)
                             }
@@ -77,7 +77,7 @@ struct ContentView: View {
                                             var hash = pbHash
                                             if hash.isEmpty {
                                                 UIApplication.shared.change(title: NSLocalizedString("Applying Wallpapers...", comment: ""), body: "Detecting PosterBoard container…")
-                                                hash = try BadQuery.findPosterBoardHash()
+                                                hash = try SandboxEscape.findPosterBoardHash()
                                                 DispatchQueue.main.async { pbHash = hash }
                                             }
                                             try pbManager.applyTendies(appHash: hash)
@@ -108,8 +108,8 @@ struct ContentView: View {
                             Button(action: {
                                 UIApplication.shared.confirmAlert(
                                     title: NSLocalizedString("Reset Collections", comment: ""),
-                                    body: SymHandler.prefersBadQuery
-                                        ? "This will wipe custom PosterBoard descriptors via bad_query, then respring."
+                                    body: SymHandler.prefersSandboxEscape
+                                        ? "This will wipe custom PosterBoard descriptors via worse_query, then respring."
                                         : NSLocalizedString("Do you want to reset collections?", comment: ""),
                                     onOK: {
                                         UIApplication.shared.alert(
@@ -121,8 +121,8 @@ struct ContentView: View {
                                         DispatchQueue.global(qos: .userInitiated).async {
                                             do {
                                                 var hash = pbHash
-                                                if hash.isEmpty && SymHandler.prefersBadQuery {
-                                                    hash = try BadQuery.findPosterBoardHash()
+                                                if hash.isEmpty && SymHandler.prefersSandboxEscape {
+                                                    hash = try SandboxEscape.findPosterBoardHash()
                                                     DispatchQueue.main.async { pbHash = hash }
                                                 }
                                                 guard !hash.isEmpty else {