tech-debt: Trust user certificates in debug builds

[david-livefront]

🎟️ Tracking

N/A

📔 Objective

This PR updates the debug network_security_config to allow user certificates on the Bitwarden domains.

[github-actions]

🤖 Bitwarden Claude Code Review

Overall Assessment: APPROVE

This PR adds <certificates src="user" /> to the Bitwarden domain-config trust anchors in the debug network security config, allowing debug builds to trust user-installed CAs (e.g., for proxy-based traffic inspection) on Bitwarden domains. The change is scoped to app/src/debug/ and does not affect release builds. Verified that the production main config still trusts only system CAs for Bitwarden domains, and that the beta variant already uses this same pattern — so this brings debug in line with an existing codebase convention.

No security, correctness, or breaking-change concerns were identified.

Code Review Details

No findings. Reviewed for:

• Production trust-anchor integrity — app/src/main/res/xml/network_security_config.xml is unchanged and still trusts only system CAs for Bitwarden domains.
• Scope — change is isolated to the debug source set and does not weaken release/production builds.
• Pattern consistency — matches the existing beta variant configuration.

[david-livefront]

Thanks @SaintPatrck