add v2.14.77 release notes covering the whole delta since v2.14.64 (v2.14.77)

@@ -0,0 +1,27 @@1+# v2.14.772+3+## Highlights4+- PIN unlock is rebuilt on device hardware. The vault key is sealed by the Android5+  Keystore instead of by the PIN, and every attempt spends a hardware-limited gate,6+  so a copied copy of app storage can no longer be used to guess your PIN offline.7+- Autofill no longer generates or copies a two-factor code before you choose an entry.8+- Site icons now ask before they are switched on, and say what enabling them shares.9+10+## Fixes11+- Autofill no longer trusts a claimed website unless the app making the request is a12+  verified browser.13+- The encrypted sync spool is excluded from cloud backup and device-to-device transfer.14+- Biometric escrow keys must now report a hardware-backed security level.15+- Bouncy Castle is upgraded to 1.84.16+- Debug builds no longer log two-factor codes or entry titles.17+- Sync handshakes reject small-order Diffie-Hellman keys.18+- Unfolding or rotating the device no longer signs you out of the vault.19+- Onboarding offers create-a-vault as an explicit choice on the final card, and labels20+  the pair-with-another-device option with a Pro badge.21+22+## Notes for PIN users23+- You may be asked to set your PIN up again after this update. Your old PIN material is24+  removed on upgrade because it was not protected by hardware.25+- Your master password is unaffected and always works.26+- If your device's hardware cannot enforce limited PIN attempts, PIN unlock is switched27+  off on that device and you continue with your master password.