GingerCal 1.4: bundled TLS 1.2, no bridge needed

CalDAV now goes through Minamp's own HTTP/TLS client (Bouncy Castle TLS 1.2, Mozilla
roots, keep-alive) instead of Apache HttpClient on Android 2.3's TLS 1.0, as the iPod
version does with BearSSL. The phone reaches the normal https:// Nextcloud address at
home and away; a pinned self-signed server or the old bridge still works.

- NetHttp transport; requests run on big-stack threads (the handshake overflows
  AsyncTask/IntentService stacks on Android 2.x)
- http:// -> https:// redirects on the same host are followed; other hosts still refused
- bridge wording replaced in Galician and English; README updated
- NetTest (TLS + CalDAV discovery through the new transport) replaces BridgeTest

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

stubs/android/content/res/AssetManager.java

@@ -0,0 +1,7 @@
+// Compile-only stub (API level 10 signatures). Never packaged into the APK.
+package android.content.res;
+
+public final class AssetManager {
+  public final String[] list(String path) throws java.io.IOException { throw new RuntimeException("Stub!"); }
+  public final java.io.InputStream open(String fileName) throws java.io.IOException { throw new RuntimeException("Stub!"); }
+}