feat: [SDK-5193] let an app opt out of subscription ID copy in its manifest

[nan-li]

Description

One Line Summary

Lets an app turn off subscription ID copy with a manifest key.

Details

Motivation

The gesture in #2727 is on by default, and the only switch is OneSignal's remote kill switch. An app that doesn't want a clipboard write in production should be able to say so itself, in its own manifest, without a support ticket.

Ticket SDK-5193. Stacked on #2727, which this PR targets.

Scope

com.onesignal.subscriptionIdCopyDisabled set to true in the app's manifest meta-data

• read in DeviceGestureDetector.start() through AndroidUtils.getManifestMetaBoolean, the same way com.onesignal.preferHMS is read.
• With the key set the detector never registers its lifecycle handler, so nothing is counted, copied or recorded.
• That is stricter than the remote kill switch, which still records disabled so we can count attempts; an app that opted out has said no.
• One INFO line at start says the key was honoured, so a developer can confirm it took.

The key names the outcome, not the gesture, so the docs can call the feature one thing. No public API, so the wrapper SDKs expose it with no change.

Other

The docs page and release notes need to say the feature is on by default and name the key.

Testing

Unit testing

One new test in DeviceGestureDetectorTests mocks the manifest read the way DeviceServiceTests does and asserts no lifecycle handler, no clip, no event. 22 tests, Spotless and detekt pass.

Manual testing

Not run on a device. The read goes through the helper every other manifest switch uses.

Affected code checklist

• Notifications
  • Display
  • Open
  • Push Processing
  • Confirm Deliveries
• Outcomes
• Sessions
• In-App Messaging
• REST API requests
• Public API changes

Checklist

Overview

• I have filled out all REQUIRED sections above
• PR does one thing
• Any Public API changes are explained in the PR details and conform to existing APIs

Testing

• I have included test coverage for these changes, or explained why they are not needed
• All automated tests pass, or I explained why that is not possible
• I have personally tested this on my device, or explained why that is not possible

Final pass

• Code is as readable as possible.
• I have reviewed this PR myself, ensuring it meets each checklist item

[github-actions]

📊 Diff Coverage Report

Diff Coverage Report (Changed Lines Only)

Gate: aggregate coverage on changed executable lines must be ≥ 80% (JaCoCo line data for lines touched in the diff).

Changed Files Coverage

• DeviceGestureDetector.kt: 3/3 touched executable lines (100.0%) (10 touched lines in diff)

Overall (aggregate gate)

3/3 touched executable lines covered (100.0% — requires ≥ 80%)

📥 View workflow run

[abdulraqeeb33]

The opt-out matches the ticket: com.onesignal.subscriptionIdCopyDisabled=true returns from start() before the lifecycle handler, so nothing is counted, copied, or recorded. That is stricter than the remote kill switch, as intended.

Two nits on how we pin and confirm the key (inline).

[abdulraqeeb33]

Approving with the two nits already on the diff. Neither blocks the opt-out.

[fadi-george]

Same as AR's nits

[nan-li]

Same as AR's nits

thanks addressed