feat: workflow automation via NotificationListenerService

Add workflow system that lets users describe automations in natural
language through the same input field. The server LLM classifies
input as either an immediate goal or a workflow rule, then:

- Parses workflow descriptions into structured trigger conditions
- Stores workflows per-user in Postgres
- Syncs workflows to device via WebSocket
- NotificationListenerService monitors notifications and triggers
  matching workflows as agent goals

Also cleans up overlay text and adds network security config.

packages/shared/src/protocol.ts

@@ -8,7 +8,12 @@ export type DeviceMessage =
   | { type: "pong" }
   | { type: "heartbeat"; batteryLevel: number; isCharging: boolean }
   | { type: "apps"; apps: InstalledApp[] }
-  | { type: "stop_goal" };
+  | { type: "stop_goal" }
+  | { type: "workflow_create"; description: string }
+  | { type: "workflow_update"; workflowId: string; enabled?: boolean }
+  | { type: "workflow_delete"; workflowId: string }
+  | { type: "workflow_sync" }
+  | { type: "workflow_trigger"; workflowId: string; notificationApp?: string; notificationTitle?: string; notificationText?: string };
 
 export type ServerToDeviceMessage =
   | { type: "auth_ok"; deviceId: string }