Fix v1 policy caching, telemetry, and diagnostic exports

[okhsunrog]

Packages sharing an appId could lose Java hook selections, policy reads could publish stale contents under newer file metadata or overwrite invalidations, and failed telemetry renames could expose partial snapshots. Java policy now uses an explicit UID-wide union; the cache validates both files and invalidation generations, retains last-good on read errors, and retries without depending on watcher events. Telemetry preserves atomic replacement and retries failed writes.

Debug file exports now derive Dashboard from captured inputs, retain capture-owned diagnostic evidence/run IDs, and include best-effort state before collection plus stable issue reasons shared with the agent bridge. The export sheet explains complete, partial and failed outcomes while keeping partial archives available for Save/Share.

Also adds localized accessible search labels, lifecycle-aware screen subscriptions, recursive/shared-source process-boundary checks, and aggregate size/count/deadline limits for HTTP request receiving. The shared config parser and hook-mask vocabulary are separated from app-side helpers to support the boundary checks.

Validation: 844 JVM tests passed; ktlint, detekt, CPD, Android Lint and the signed, minified debug APK build passed with Kotlin warnings treated as errors. The bundle golden and schema-2 additive-field documentation are updated.

This stays a draft for device verification: P3-09 (small display, landscape, large fonts and reduced animations), TalkBack, lifecycle transitions, real LSPosed/SELinux file failures and export interactions were not executed because no Android device was attached. P3-08 was reviewed; screen splitting without a concrete benefit was left out.

Per-item implementation and verification status.