feat: add Android platform evidence tools

[mixxer]

Summary

Add nine Android platform analysis tools through the library, CLI, and MCP: AIDL implementation, JNI bridge, HAL interface, system service, permission, broadcast, Messenger, content provider, and local socket analysis. Results expose source evidence, package verification, ambiguity, and search limits.

The tools can be built and tested independently of #1927. Anonymous implementation coverage benefits from the Java/Kotlin extraction changes in #1927; candidate matches do not establish runtime Android behavior.

Validation

• Rebased on upstream 6560052a6f856855d3f71eee838fd66ccfa4285d; tested head 8c53ebc7950b36825b15612949555f229c13612e.
• macOS / Node 24.21.0: build passed; full suite: 450 passed / 16 skipped files; 5,855 passed, 263 skipped (portable backend).
• TypeScript language server: no new diagnostics relative to upstream; changed source files have no errors or warnings. Existing upstream test diagnostics are tracked separately.
• Linux CI: all 11 jobs passed, including this exact PR head on Node 24. Native kernel checks also passed for fix: preserve Java and Kotlin anonymous inheritance #1927 and fix(java): resolve calls through static fields #1949; integrated main passed on Node 22 and 24.
• Fresh public AOSP sparse-source index: 8,485 indexed files; all nine tool probes retained expected outcomes. IKeyguardService remains no_implementation_found in this standalone branch; the integrated branch finds its anonymous implementation. These are static-source checks, not device/runtime tests.
• The normalized full graph from the 8,485-file sparse Android index is byte-identical to upstream (SHA-256 d2efa3ca857723a67d0b3df9b4e02e25d759bb2b8fdea16f6f50607f08d20b83), confirming these query tools leave the indexed graph unchanged.