fix(pipeline): delete dead database-only hot-list branch and create domain approval file

The hot-list generator's database heavy-hitter else-branch (which
created velocity entries for DB-only rows) was dead code: the filter at
line 262 dropped every entry without _times, and database entries never
had any. Deleting it rather than reviving it is intentional: database-
only rows would skip the independent-reporter gates that prevent one
person from inflating the hot list.

data/spam_domains_approved.json now exists as an empty approval list,
documenting the workflow for domain feed review. Until domains are
reviewed and added here, the domain feed continues to derive from the
automated candidate pipeline only.

Author: SysAdminDoc

README.md

@@ -508,7 +508,7 @@ language in [issue #7](https://github.com/SysAdminDoc/CallShield/issues/7).
 | URL Safety | Local spam-domain data; optional URLhaus (abuse.ch) |
 | Verification | Local Gradle, lint, and release-artifact checks |
 | Tests | 1100 JVM unit tests (JUnit) |
-| Strings | 1454 string resources and 34 plural groups (translation-ready) |
+| Strings | 1462 string resources and 34 plural groups (translation-ready) |
 | Accessibility | 100+ content descriptions, 48dp touch targets |
 | Min SDK | 29 (Android 10) |
 | Target SDK | 36 |

data/spam_domains_approved.json

@@ -0,0 +1,4 @@
+{
+  "description": "Domains reviewed and approved for the published spam domain feed. A domain that passes review here and also clears the automated gates in extract_spam_domains.py is included in spam_domains.json. Domains not in this file remain in spam_domains_review.json until reviewed.",
+  "approved": []
+}

scripts/generate_hot_list.py

@@ -241,18 +241,6 @@ def main(argv: list[str] | None = None) -> int:
                 # trending numbers out of the top-N entirely.
                 if num in velocity:
                     velocity[num]["total_reports"] = entry.get("reports", 0)
-                else:
-                    velocity[num] = {
-                        "number": num,
-                        "type": entry.get("type", "robocall"),
-                        # Seen inside the window, but we cannot know how many of
-                        # its lifetime reports landed there — credit it one.
-                        "reports": 1,
-                        "total_reports": entry.get("reports", 0),
-                        "first_seen": entry.get("first_seen", last_seen),
-                        "last_seen": last_seen,
-                        "description": entry.get("description", "Community reported"),
-                    }
 
     # ── Filter and rank ───────────────────────────────────────────────
     hot_internal = []

scripts/translation_floors.json

@@ -1,6 +1,6 @@
 {
   "description": "Minimum translated-string coverage per locale, in percent. check_translations.py fails when a shipped locale drops below its floor. --update-floors only raises a floor. Lowering one is a hand edit, made on purpose and explained in the commit message.",
   "floors": {
-    "values-zh-rCN": 76.1
+    "values-zh-rCN": 75.6
   }
 }