Attribution: stitch app download to first launch

Users who download from our website lose attribution context once they open the app. PR #4544 adds UTM params to owned outbound links, and PR #4411 (merged) stitches trial analytics via fingerprint headers — but we still need a durable long-term identity link from web visit → install → first session beyond UTMs.