GingerCal 1.4: bundled TLS 1.2, no bridge needed

CalDAV now goes through Minamp's own HTTP/TLS client (Bouncy Castle TLS 1.2, Mozilla
roots, keep-alive) instead of Apache HttpClient on Android 2.3's TLS 1.0, as the iPod
version does with BearSSL. The phone reaches the normal https:// Nextcloud address at
home and away; a pinned self-signed server or the old bridge still works.

- NetHttp transport; requests run on big-stack threads (the handshake overflows
  AsyncTask/IntentService stacks on Android 2.x)
- http:// -> https:// redirects on the same host are followed; other hosts still refused
- bridge wording replaced in Galician and English; README updated
- NetTest (TLS + CalDAV discovery through the new transport) replaces BridgeTest

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

stubs/android/content/ContextWrapper.java

@@ -7,6 +7,7 @@ public class ContextWrapper extends Context {
   public SharedPreferences getSharedPreferences(String name, int mode) { throw new RuntimeException("Stub!"); }
   public android.content.res.Resources getResources() { throw new RuntimeException("Stub!"); }
   public Context getApplicationContext() { throw new RuntimeException("Stub!"); }
+  public android.content.res.AssetManager getAssets() { throw new RuntimeException("Stub!"); }
   public void startActivity(Intent intent) { throw new RuntimeException("Stub!"); }
   public ComponentName startService(Intent service) { throw new RuntimeException("Stub!"); }
   public void sendBroadcast(Intent intent) { throw new RuntimeException("Stub!"); }