test: enforce zero-volume physical UAT guard

[ruizkinio]

Summary

• add a fail-closed wrapper for every physical Android UAT operation
• set and verify media stream 3 at numeric zero before device work and restore/re-verify zero afterward
• reject emulator/QEMU descriptors before target-directed shell commands
• enroll exact physical identities into an ignored, path-confined private target file
• constrain ADB/shell operations and reject audio, transport, privilege, reboot, and injection bypasses
• document the required release evidence workflow

Verification

• npm test (52/52)
• node --check release/physical-device.mjs
• node --check release/tests/physical-device.test.mjs
• git diff --check
• independent read-only adversarial review and remediation

No physical Android device or emulator was contacted while implementing or testing this change.