auto-import latest offsets from github

[chisewaguri]

• add offsets.json at repo root with all 23 known kernels (generated from src/kernels/*/offsets.h)
• app fetches it from raw.githubusercontent on startup when the running kernel has no built-in or imported entry, so new kernels work without an app rebuild
• ci workflow regenerates offsets.json whenever src/kernels/ changes and auto-commits the result

[chisewaguri]

i think this is ready

[Copilot]

Pull request overview

Copilot reviewed 4 out of 5 changed files in this pull request and generated 2 comments.

Suppressed comments (2)

app/src/main/java/com/ghostlock/app/MainActivity.java:411

• The downloaded table is mutable, unsigned content from main, yet these values are later trusted as kernel addresses by the native exploit. This bypasses APK signing: a compromised repository credential or unauthorized push could change behavior for installed apps immediately and cause attacker-directed kernel-memory access or crashes. Require a detached signature made by a trusted key and verify it with a public key pinned in the app before merging (or distribute updates through the signed APK/release channel).

                conn = (HttpURLConnection) new URL(OFFSETS_URL).openConnection();

tools/gen_offsets_json.py:32

• The parser regex accepts negative hexadecimal literals, but this branch only recognizes strings beginning directly with 0x; -0x2 falls through to decimal parsing and raises ValueError, aborting regeneration. Handle the optional sign consistently.

def parse_val(v):
    v = v.strip()
    if v.startswith("0x") or v.startswith("0X"):
        return int(v, 16)
    return int(v)