Open a PR when a native SDK releases

[ianrumac]

Summary

• Adds native-sdk-bump.yml, the same two-stage bump the Flutter and Expo wrappers use: pin the native SDK and open a PR, then Claude Code integrates any public API change onto that PR.
• Android's exact pin in Plugins/Android/.../build.gradle is updated in place. iOS is pinned in both the Podfile lines (Editor/SuperwallPostBuildProcessor.cs) and the SPM harness (ci~/ios-harness/Package.swift); a floating ~> 4.0 / from: requirement becomes an exact version on the first bump.
• The package version is not bumped. The note goes under ## [Unreleased] in CHANGELOG.md.

Test plan

• Add ANTHROPIC_API_KEY and SDK_BOT_TOKEN to this repo (neither is set today). The bump PR still opens without the API key; the agent step fails and comments on the PR.
• Dispatch the workflow by hand with dry_run: true and confirm the diff only changes the pin and the changelog.
• After Android's notify change is merged, and WRAPPER_DISPATCH_TOKEN can dispatch to this repo, confirm a real Android release opens a bump PR here.

Made with Cursor