ManagedConfigReader

Reads Android "managed configurations" (app restrictions) typically provided by EMM/MDM.

This lets you run pilots without re-building the app per site.

Keys are intentionally minimal and stable.