chore: Release 5.4.7

[onesignal-deploy]

Channels: Current

🛠️ Native Dependency Updates

• Update Android SDK from 5.9.2 to 5.9.3
  • fix: [SDK-4732] track activity lifecycle from process start to fix late-init focus (#2655)
  • fix: [SDK-4735] route requestPermission fallbackToSettings to settings when permanently denied (#2656)
• Update iOS SDK from 5.5.1 to 5.5.2
  • fix: Preserve user identity across iOS prewarm launches (fix: Preserve user identity across iOS prewarm launches  OneSignal-iOS-SDK#1669)

[claude]

LGTM, straightforward release bump to 5.4.7 with Android SDK update to 5.9.3.

Extended reasoning...

Overview

This is a routine release PR bumping the package version from 5.4.6 to 5.4.7. Four files are touched: package.json (version field), android/build.gradle (OneSignal Android SDK dep 5.9.2 → 5.9.3), and the SDK version strings in android/src/main/java/com/onesignal/rnonesignalandroid/RNOneSignal.java and ios/RCTOneSignal/RCTOneSignal.mm (both 050406 → 050407). All version identifiers are consistent across the four files.

Security risks

None. No new code paths, no permissions changes, no auth/crypto/network logic introduced — the iOS pod version is unchanged here, only the Android transitive SDK is bumped to pick up two upstream fixes (activity lifecycle tracking and requestPermission fallbackToSettings routing).

Level of scrutiny

Low. Mechanical release/version bump following the established pattern in this repo. The substantive behavior change lives in the upstream Android SDK 5.9.3 release; this PR just wires the new version number through.

Other factors

No bugs were flagged by the bug hunting system, no reviewer comments are outstanding, and the timeline is empty. The diff is small, self-contained, and reversible.