Pico Transit v0.2.1

Removes two app-side workarounds now that every agency's realtime feed URL (and LTC's static feed) resolves through a redirect to HTTPS:

• The :netconfig cleartext exception for RIPTA/LTC's HTTP-only origins is gone
• The LtcTrustAnchor/GtfsTrustAnchors.kt bundled-root-cert workaround for LTC's untrusted cert chain is gone
• GtfsRealtimeClient.fetchFeed simplified to a single request now that redirects resolve upstream instead of in app code

Also:

• Fixed the home screen's "ETA h:mm" text rendering in the device's timezone instead of the boarded trip's agency timezone
• Dropped "-testing" from LTC's display name
• "Merge feed stations" now defaults on
• Merged upstream light-sdk/main (NFC reader API, detached audio playback, Light Keyboard v0.0.18, zxing/sol4k allow-list)