Wake/wifi/keyguard lock audit plus deprecation tidy.
Wifi lock is now functional. WIFI_MODE_FULL is documented by AOSP as "non-functional and will have no impact", and the tablet agreed — held as type=1 while the framework counted 0 full low latency acquired. Replaced with WIFI_MODE_FULL_LOW_LATENCY behind an SDK_INT >= 29 guard, the mode that actually disables wifi power save. Confirmed after promotion: type=4, 2 full low latency acquired, mPowerSaveDisableRequests 2.
Wake lock renamed, kept. partialWakeLock was never partial — it is FULL_WAKE_LOCK or ACQUIRE_CAUSES_WAKEUP. Now screenWakeLock. It is never held in steady state (FLAG_KEEP_SCREEN_ON does that job) but is the only thing that can turn a dark screen on, so it stays.
Keyguard disableKeyguard() kept. Redundant on a device with no lock screen, but the window flags it duplicates cover one activity only and setShowWhenLocked() needs API 27 against minSdk 26.
allowFileAccess = true removed — and it was not inert. targetSdk 34 means the platform default is false, so it was actively re-enabling filesystem access. The file:///android_asset error page is exempt and unaffected.
databaseEnabled removed (deprecated WebSQL, no-op) and a satisfied TODO comment deleted.
ABI splits dropped. No native libraries since kmb.11 made the four splits degenerate — five byte-identical ~9.2MB APKs. One universal APK now, same 9248461 bytes. Release artifacts are WallPanelApp-universal-<versionName>.apk; promote.sh's rollback glob was widened to WallPanelApp-*.apk so earlier -arm64- releases remain valid rollback targets.
Verified: smoke-device.sh PASS, panel-render-probe.sh RENDERING, promote.sh installed/relaunched/post-install-probed the universal APK RENDERING, and walk-up motion wake confirmed on the tablet.