feat(android): read-only viewer - unlock, search, detail

Replaces the crypto test bench with the three screens the client actually
needs. PMA.Vault holds the decrypted snapshot and answers the search;
mainApk builds unlock/list/detail in code rather than three .fmx files.

Two safety rules live in the UI because nowhere else can hold them: the
plaintext is dropped when the app backgrounds (screen hidden on
WillBecomeInactive, which precedes the recents-preview capture), and the
clipboard is cleared after 45 s only if it still holds what we put there.

The search deliberately ignores the password field.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

pmserverApk.dpr

@@ -8,7 +8,8 @@ uses
   PMA.TestVector in 'android-client\PMA.TestVector.pas',
   PMA.SyncClient in 'android-client\PMA.SyncClient.pas',
   PMA.Store in 'android-client\PMA.Store.pas',
-  PMA.Biometric in 'android-client\PMA.Biometric.pas';
+  PMA.Biometric in 'android-client\PMA.Biometric.pas',
+  PMA.Vault in 'android-client\PMA.Vault.pas';
 
 {$R *.res}