Prepare Android release artifacts and listing (#112)

Add Rust distribution auditing, pinned post-build AAB signing, complete offline third-party notices, an Android privacy policy and reviewable Play listing assets. Preserve the application ID and audit both ARM ABIs, native symbols, baseline profiles and R8 mapping.

Fix dialog focus ownership, navigation-triggered cleanup loops and stale authentication errors after first-run setup, with native and real-activity regressions.

Google Play publication is deferred by the user. Issue #112 remains open for production signing, Console declarations and actual Play install/update verification.

android/play/graphics/feature-graphic.svg

@@ -0,0 +1,10 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="1024" height="500" viewBox="0 0 1024 500">
+  <title>IronStorage — local-first passwords with GPG, Git and TOTP</title>
+  <rect width="1024" height="500" fill="#191d26"/>
+  <image xlink:href="../../app/src/main/res/drawable-nodpi/ic_vault.png" width="500" height="500"/>
+  <rect x="500" width="1" height="500" fill="#444955"/>
+  <rect x="548" y="134" width="48" height="4" rx="2" fill="#d5c0f2"/>
+  <text x="545" y="216" fill="#faf8ff" font-family="Arial, sans-serif" font-size="54" font-weight="700">IronStorage</text>
+  <text x="548" y="272" fill="#d8dce5" font-family="Arial, sans-serif" font-size="27">Local-first passwords</text>
+  <text x="548" y="319" fill="#b3bac8" font-family="Arial, sans-serif" font-size="24">GPG · Git · TOTP</text>
+</svg>

android/play/graphics/icon.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="512" height="512" viewBox="0 0 512 512">
+  <title>IronStorage vault icon</title>
+  <image xlink:href="../../app/src/main/res/drawable-nodpi/ic_vault.png" width="512" height="512"/>
+</svg>