14-4.9

Skips 4.8 — this release contains it.

Google Photos Locked Folder works again on a device that really has a device owner, and without putting Photos in the scope. The device-wide device-owner spoof now covers what apps actually read, not just the owner's name. It answers apps only; the framework asking itself still gets the truth.

Also since 4.7: app-facing categories run only in apps you scope, unknown-sources session installs and uninstalls go through, and the module switches itself off instead of defaulting everything on if it cannot read its own settings.

Reported and verified by @MootComb.

Full changelog: https://github.com/Bouteillepleine/DuckDevicePolicy/blob/main/CHANGELOG.md