P2 backlog — Android client

[badbread]

Source: release-readiness audit 2026-07-14 (P2 backlog). Android items.

• plate report holds many full-res bitmaps -> OOM risk
• recoverConnections() cancelAll() cancels unrelated in-flight calls
• plates feed truncates at 200 while showing total (grouped stats wrong for older reads)
• PDF BOLO banner is exact-match only (misses fuzzy-alerted plates)
• Motion Tuner polls while backgrounded
• plaintext-prefs fallback holds a long-lived token
• cross-account view residue on a shared device
• login discards the session if /auth/me hiccups
• dead JWT-in-URL path
• unused permissions
• RTL / locale nits
• unpruned cache dirs

[badbread]

Shipped in #148 (P2 backlog remediation — Android client).