feat: harden device-owner setup and agent control

[DrDavidDa]

Summary

• add broadcast-based agent debug control, cleaner session history, and prompt safety coverage
• add formal device-owner operational docs and reusable provisioning scripts
• add a setup-screen permission readiness dashboard with Device Owner auto-fix hooks
• fix mdm unit-test dependency drift and add readiness logic tests

Verification

• JAVA_HOME=/opt/homebrew/opt/openjdk@21/libexec/openjdk.jdk/Contents/Home PATH=/opt/homebrew/opt/openjdk@21/bin:/usr/local/bin:/System/Cryptexes/App/usr/bin:/usr/bin:/bin:/usr/sbin:/sbin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/opt/pmk/env/global/bin:/opt/homebrew/bin:/Users/david/.codex/tmp/arg0/codex-arg0xNamub:/opt/homebrew/lib/node_modules/@openai/codex/node_modules/@openai/codex-darwin-arm64/vendor/aarch64-apple-darwin/path:/Users/david/.local/bin ./gradlew :mdm:testDebugUnitTest :app:testDebugUnitTest :app:assembleDebug :app:assembleOwnerDebug

[vercel]

@DrDavidDa is attempting to deploy a commit to the wangdiyuan1988-gmailcom's projects Team on Vercel.

A member of the Team first needs to authorize it.

[andforce]

@DrDavidDa thanks for PR, but need Resolve conflicts first~