feat(android): replace WebView with tested native Compose API slice

Add real native onboarding/auth/dashboard/tasks/notes/shopping, origin-bound HTTPS and encrypted AndroidKeyStore session persistence. Archive the superseded browser renderer and tests. Verify 10 JVM tests, 6 native API-35 emulator tests, lintDebug/lintRelease and debug/unsigned release APK/AAB builds; the real upstream suite passes 7 tests and exports a nonblank native fixture screenshot. Tink host-tool update removes the old generated-protobuf warning. Full module/visual parity remains explicitly incomplete.

android/buildscript-gradle.lockfile

@@ -41,7 +41,7 @@ com.android:zipflinger:9.4.1=classpath
 com.google.auto.value:auto-value-annotations:1.6.2=classpath
 com.google.code.findbugs:jsr305:3.0.2=classpath
 com.google.code.gson:gson:2.11.0=classpath
-com.google.crypto.tink:tink:1.7.0=classpath
+com.google.crypto.tink:tink:1.15.0=classpath
 com.google.dagger:dagger:2.28.3=classpath
 com.google.errorprone:error_prone_annotations:2.36.0=classpath
 com.google.flatbuffers:flatbuffers-java:1.12.0=classpath
@@ -80,6 +80,8 @@ org.checkerframework:checker-qual:3.43.0=classpath
 org.glassfish.jaxb:jaxb-runtime:2.3.2=classpath
 org.glassfish.jaxb:txw2:2.3.2=classpath
 org.jdom:jdom2:2.0.6.1=classpath
+org.jetbrains.kotlin.plugin.compose:org.jetbrains.kotlin.plugin.compose.gradle.plugin:2.4.21=classpath
+org.jetbrains.kotlin:compose-compiler-gradle-plugin:2.4.21=classpath
 org.jetbrains.kotlin:fus-statistics-gradle-plugin:2.4.21=classpath
 org.jetbrains.kotlin:kotlin-build-statistics:2.4.21=classpath
 org.jetbrains.kotlin:kotlin-build-tools-api:2.4.21=classpath