Strip READ_PHONE_STATE from merged manifest

A transitive dependency (likely ML Kit face detection / Play Services
Basement in the full flavor) was injecting READ_PHONE_STATE into the
merged manifest. The app doesn't need it, so remove it via the same
tools:node="remove" pattern already used for INTERNET and
ACCESS_NETWORK_STATE.

Author: claude

app/src/main/AndroidManifest.xml

@@ -18,6 +18,7 @@
 	<!-- Prevent dependencies from adding these permissions -->
 	<uses-permission android:name="android.permission.INTERNET" tools:node="remove"/>
 	<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" tools:node="remove"/>
+	<uses-permission android:name="android.permission.READ_PHONE_STATE" tools:node="remove"/>
 
     <application
             android:name=".SnapSafeApplication"