feat(mobile): add Android APK/AAB/DEX and iOS IPA static investigation providers

[morluto]

Summary

Add static providers for Android APK/AAB/DEX and Apple IPA artifacts, including manifests, resources, signing, and native libraries.

Closes #366.

Changes

• Android formats: APK, AAB, DEX with manifest parsing (package name, version, SDK levels, permissions, activities, services, receivers, providers)
• iOS formats: IPA with Info.plist parsing (bundle identifier, version, minimum OS version, platforms, device capabilities, permissions)
• Signing: Android v1/v2/v3 signature schemes and iOS provisioning profiles
• Resources: Layout, drawable, string, asset, raw, native lib, manifest, entitlements, provisioning classifications
• Native libraries: Architecture filtering and enumeration (arm64-v8a, armeabi-v7a, x86, x86_64)

Verification

npm run typecheck   # passes
npm run knip        # passes
npx vitest run tests/mobileApplicationInvestigation.test.ts  # 7 tests pass

Acceptance criteria

• ✅ Static workflows work without a connected physical device
• ✅ Signing material, device identifiers, and secrets are redacted

Continue this on Linzumi

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.