feat: plumb module_version through as a separate field

Add module_version as an optional field through the full updater stack:

- YamlConfig: parse module_version from shorebird.yaml
- UpdateConfig: propagate module_version from yaml config
- PatchCheckRequest: send module_version alongside release_version
  (skipped when null via serde skip_serializing_if)

The server uses module_version for patch lookup when present,
while release_version always contains the host app's version
for analytics. This avoids polluting release_version data with
git hashes from module releases.

Part of shorebirdtech/shorebird#793

Author: eseidel

library/src/config.rs

@@ -86,6 +86,7 @@ pub struct UpdateConfig {
     pub file_provider: Box<dyn ExternalFileProvider>,
     pub patch_public_key: Option<String>,
     pub patch_verification: PatchVerificationMode,
+    pub module_version: Option<String>,
 }
 
 /// Returns Ok if the config was set successfully, Err if it was already set.
@@ -129,6 +130,7 @@ pub fn set_config(
             file_provider,
             patch_public_key: yaml.patch_public_key.to_owned(),
             patch_verification: yaml.patch_verification.unwrap_or_default(),
+            module_version: yaml.module_version.to_owned(),
         };
         shorebird_debug!("Updater configured with: {:?}", new_config);
         *config = Some(new_config);

library/src/network.rs

@@ -247,6 +247,11 @@ pub struct PatchCheckRequest {
     /// The unique ID of this device. This is a random UUID generated by Shorebird and _not_ the
     /// device's UUID or any other identifier that has meaning outside of Shorebird.
     pub client_id: String,
+    /// Module version for add-to-app releases (AAR/iOS framework).
+    /// When present, used instead of release_version for patch lookup.
+    /// The release_version still contains the host app's version for analytics.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub module_version: Option<String>,
     // We specifically do not send a patch number as part of this request because we always want to
     // know what the latest available patch is.
 }
@@ -260,6 +265,7 @@ impl PatchCheckRequest {
             platform: current_platform().to_string(),
             arch: current_arch().to_string(),
             client_id: client_id.to_string(),
+            module_version: config.module_version.clone(),
         }
     }
 }

library/src/yaml.rs

@@ -30,6 +30,9 @@ pub struct YamlConfig {
     pub patch_public_key: Option<String>,
     /// When to verify patch signatures. Defaults to "strict" (verify at boot time).
     pub patch_verification: Option<PatchVerificationMode>,
+    /// Module version for add-to-app releases (AAR/iOS framework).
+    /// When present, used instead of release_version for patch lookup.
+    pub module_version: Option<String>,
 }
 
 impl YamlConfig {