feat: add prompt-first batches and pausable task guidance

scripts/download_config.ps1

@@ -39,6 +39,8 @@ function Initialize-ArtemisDownloads {
     $env:npm_config_fetch_timeout = [string]($timeout * 1000)
     $values.mode = $Mode
     $values.timeout_seconds = $timeout
+    # Official scrcpy v4.1 win64 release digest. Verify every mirror/override equally.
+    $values.scrcpy_sha256 = '5b12172b3264b2889f4583ee64752ce832e29bc8b1089dca81093459697165db'
     $script:ArtemisDownloads = [pscustomobject]$values
     Write-Host "   [INFO] Download mode: $Mode (config/downloads.json)." -ForegroundColor Cyan
 }

scripts/start.ps1

@@ -219,11 +219,16 @@ function Install-PortableScrcpy {
 
     Write-Host "   [INFO] Installing portable scrcpy in user space..." -ForegroundColor Cyan
     if ($ArtemisDownloads.mode -eq 'China' -and $ArtemisDownloads.scrcpy_url.StartsWith('https://github.com/')) {
-        Write-Host '   [INFO] scrcpy uses GitHub. If unreachable, set overrides.scrcpy_url in config/downloads.json.' -ForegroundColor Yellow
+        Write-Host '   [WARN] China mode has no non-GitHub scrcpy source. Configure overrides.scrcpy_url or install scrcpy manually.' -ForegroundColor Yellow
+        return $false
     }
     try {
         $zipPath = "$env:TEMP\scrcpy-win64.zip"
         if (Invoke-DownloadFile -Uri $ArtemisDownloads.scrcpy_url -OutFile $zipPath) {
+            $actualHash = (Get-FileHash -LiteralPath $zipPath -Algorithm SHA256).Hash.ToLowerInvariant()
+            if ($actualHash -ne $ArtemisDownloads.scrcpy_sha256) {
+                throw 'Downloaded scrcpy ZIP failed official SHA256 verification.'
+            }
             $extractDir = "$env:TEMP\scrcpy_extract"
             if (Test-Path $extractDir) { Remove-Item $extractDir -Recurse -Force -ErrorAction SilentlyContinue }
             New-Item -ItemType Directory -Path $extractDir -Force | Out-Null