fix(android): post-merge cleanup from the fork-resync integration

- ConfigStore.toJson(): drop a duplicate `fronting_groups` put left
  behind when therealaleph#1033 (fronting groups) + therealaleph#1057 (extras passthrough) +
  therealaleph#1189 (draft-drop filter) were squash-merged in sequence. The
  later filtered put was being overwritten by the older unfiltered
  one, breaking the ConfigStoreFrontingGroupsTest expectation that
  draft groups never reach disk.
- ProfileStoreTest.applyProfile_*_returns_partial: the snapshot
  config was missing a deployment ID, so validateRuntimeShape
  rejected it as 'apps_script mode requires script_id' before the
  test's injected write failure could be exercised. Pre-existing
  bug in therealaleph#1057's tests; only surfaced now that we run the full
  suite on the integrated branch.

Author: dazzling-no-more

android/app/src/main/java/com/therealaleph/mhrv/ConfigStore.kt

@@ -410,18 +410,6 @@ data class MhrvConfig(
                 UiLang.EN -> "en"
             })
 
-            if (frontingGroups.isNotEmpty()) {
-                put("fronting_groups", JSONArray().apply {
-                    for (g in frontingGroups) {
-                        put(JSONObject().apply {
-                            put("name", g.name)
-                            put("ip", g.ip)
-                            put("sni", g.sni)
-                            put("domains", JSONArray().apply { g.domains.forEach { put(it) } })
-                        })
-                    }
-                })
-            }
             // Splice back any keys this build doesn't model (so they
             // survive a load → edit → save round-trip and reach the
             // native runtime, which IS the source of truth for them).

android/app/src/test/java/com/therealaleph/mhrv/ProfileStoreTest.kt

@@ -627,8 +627,20 @@ class ProfileStoreTest {
      */
     @Test
     fun applyProfile_profiles_write_failure_returns_partial() {
-        ProfileStore.upsert(ctx, "home", MhrvConfig(authKey = "homekey"))
-        ProfileStore.upsert(ctx, "other", MhrvConfig(authKey = "otherkey"))
+        // Snapshots must pass `validateRuntimeShape` — apps_script
+        // mode (the default) requires a deployment ID + auth_key,
+        // otherwise applyProfile short-circuits with Failed before
+        // ever reaching the step-1 write we're trying to verify here.
+        ProfileStore.upsert(
+            ctx,
+            "home",
+            MhrvConfig(appsScriptUrls = listOf("HOME_ID"), authKey = "homekey"),
+        )
+        ProfileStore.upsert(
+            ctx,
+            "other",
+            MhrvConfig(appsScriptUrls = listOf("OTHER_ID"), authKey = "otherkey"),
+        )
         val profilesBefore = profilesFile.readText()
         assertEquals("other", ProfileStore.load(ctx).active)