Colitu VPN for Android 2.5.4

Security and privacy update

• Signing out: no more false "session expired" message on the sign-in screen, and a session renewal running at the moment of sign-out can no longer restore the session.
• TV sign-in with a QR code: the approval screen is protected against screenshots and taps through overlays; the camera always turns off when the scanner closes.
• Updates: the "update required" prompt only follows Colitu's signed update information.
• Routing data now lives in the app's private storage (Android 9 and older) and is refreshed after every update.
• Privacy: passwords are no longer kept in Android's saved screen state, support diagnostics hide e-mail addresses and link tokens, and each installation gets its own random connection key.
• Length limits on sign-in fields; the code confirmation screen no longer stays stuck on loading after a restart.
• Build: pinned CI actions, Gradle distribution checksum, unused package repository removed.