YM-Android7

Bring Android profile approvals in line with the IDP and iOS cancellation contract: consume profile_request_cancelled, remove the matching sheet and queued response, reject late delivery/responses, include known IDs in init, and reconcile only server-confirmed IDs after offline reconnect. Preserve newer requests and other browser sessions. Continue connection recovery with capped backoff while the network is available; obsolete socket callbacks must not disturb a newer connection. Add regression coverage and validate the app build. Implementation authorized by Joshua on 2026-09-06; physical-device acceptance remains separate.