Adopt the next Android tier-2 contract rulings from putio-design#43

[altaywtf]

Part of #14 (W1 — design foundations).

Blocked by putio-design#43 and the first tagged @putdotio/design release that contains its resolved Android rulings. Blocks #23 and #32.

Current checkpoint

v3.2.1 is the latest tagged design release. The DTCG graph in v3.1.0, v3.2.0, and v3.2.1 is byte-identical to the vendored graph (SHA-256 a915906059426c95bde3fea77b4de72e1097fc50d46842b417143172dfc5c0c6). The two 3.2 releases are auth-guide changes and do not resolve #43. Keep the current vendored graph until a tagged release contains the settled contract; an open design pull request is not an adopted release.

Outcome

Android adopts the next immutable tier-2 contract without copying platform-native output from putio-design or silently resolving card-versus-implementation conflicts in the app.

Scope

• Reconcile the v3.1.0 checkpoint and the first later tagged release containing the resolved Public links and sharing UI #43 rulings
• Update the vendored DTCG source only from the tagged package and record whether its graph changed
• Generate and pin the settled Material 3 phone and Compose for TV role projections through buildSrc; never hand-write token colors
• Update docs/design-v3-discrepancies.md with every accepted ruling, remaining upstream gap, and measured platform exception
• Route Android TV card rulings to TV shell and device-code auth on the shared core #32 (shell/focus/navigation), TV browse parity: files, search, history, trash, settings vs the 34-capture oracle #33 (browse/search/account), and TV playback parity on Media3 with the Back-button state machine #34 (playback/resume) rather than copying web or Roku behavior
• Preserve stock Material 3 and Compose for TV behavior where the tier-2 contract delegates to the platform

Acceptance criteria

• The adopted design tag and source hash are recorded, with no claim that an open pull request or untagged commit shipped
• Generated phone and TV role coverage is pinned by codegen/theme tests
• The discrepancy ledger contains no silent card override
• TV shell and device-code auth on the shared core #32–TV playback parity on Media3 with the Back-button state machine #34 cite the final rulings that they own
• ./gradlew verify :buildSrc:test, both production-debug assembles, and affected phone/TV harness proof pass

[altaywtf]

Reconciled against the 2026-08-30 design releases:

• v3.2.0 and v3.2.1 are auth-guide-only releases.
• Their dist/tokens.dtcg.json hashes match v3.1.0 and this repo's vendored graph exactly: a915906059426c95bde3fea77b4de72e1097fc50d46842b417143172dfc5c0c6.
• putio-design#46 is green but still open; it changes Android docs/specimens, not tokens or package APIs.

No Android code adoption is required from 3.2.x. This issue correctly remains blocked on #43 plus a tagged release carrying the settled Android rulings.