fips-android

docs: add top-level README with status, build, architecture, AI disclosure

Merge branch 'feat/dns-tun-intercept' into main

fix: use log crate instead of tracing for Android logcat visibility

feat: add zephyrus peer alias for DNS resolution

fix: refuse non-fips DNS queries and drop .fips search domain