Prepare Android release artifacts and listing (#112)

Add Rust distribution auditing, pinned post-build AAB signing, complete offline third-party notices, an Android privacy policy and reviewable Play listing assets. Preserve the application ID and audit both ARM ABIs, native symbols, baseline profiles and R8 mapping.

Fix dialog focus ownership, navigation-triggered cleanup loops and stale authentication errors after first-run setup, with native and real-activity regressions.

Google Play publication is deferred by the user. Issue #112 remains open for production signing, Console declarations and actual Play install/update verification.

tools/android-build/src/native.rs

@@ -112,13 +112,18 @@ pub fn audit_split(path: &Path, abi: &str) -> Result<(), Box<dyn Error>> {
 
 pub fn audit_release(package: &Path, symbols: &Path) -> Result<(), Box<dyn Error>> {
     audit_package(package)?;
+    let prefix = if package.extension().is_some_and(|ext| ext == "aab") {
+        "base/lib"
+    } else {
+        "lib"
+    };
     let mut package = zip::ZipArchive::new(File::open(package)?)?;
     let mut symbols = zip::ZipArchive::new(File::open(symbols)?)?;
     for abi in ABIS {
         for library in ["libironstorage_android.so", "libjnidispatch.so"] {
             let mut bytes = Vec::new();
             package
-                .by_name(&format!("lib/{abi}/{library}"))?
+                .by_name(&format!("{prefix}/{abi}/{library}"))?
                 .read_to_end(&mut bytes)?;
             let mut debug = Vec::new();
             let mut entry = symbols.by_name(&format!("{abi}/{library}.dbg"))?;