fix(android): clamp imported socksPort to non-privileged range 1024-65535

Android (Unix) reserves ports 1-1023 as privileged: a regular app
cannot bind to them without root. The previous coerceIn(1, 65535)
still allowed privileged ports through, which would fail at bind
time on non-rooted devices.

Tighten the clamp to coerceIn(1024, 65535). Update the test to
cover three boundary cases: above 65535 -> 65535, below 1024 -> 1024,
and a privileged port (80) -> 1024.

Author: Hidden-Node

android/app/src/main/java/com/gooserelay/gooserelayvpn/ui/profiles/ProfilesViewModel.kt

@@ -175,7 +175,7 @@ class ProfilesViewModel @Inject constructor(
             val name = root.get("name")?.asString ?: defaultName ?: "Imported"
             val debugTiming = root.get("debug_timing")?.asBoolean ?: false
             val socksHost = root.get("socks_host")?.asString ?: "127.0.0.1"
-            val socksPort = root.get("socks_port")?.asInt?.coerceIn(1, 65535) ?: 1080
+            val socksPort = root.get("socks_port")?.asInt?.coerceIn(1024, 65535) ?: 1080
             val socksUser = root.get("socks_user")?.asString ?: ""
             val socksPass = root.get("socks_pass")?.asString ?: ""
             val googleHost = root.get("google_host")?.asString ?: "216.239.38.120"

android/app/src/test/java/com/gooserelay/gooserelayvpn/ProfilesViewModelParseTest.kt

@@ -48,12 +48,15 @@ class ProfilesViewModelParseTest {
     }
 
     @Test
-    fun `clamps socksPort to 1_65535 range`() {
+    fun `clamps socksPort to 1024_65535 range`() {
         val tooHigh = """{"tunnel_key":"k","socks_port":99999}"""
-        assertThat(vm().parseProfileFromJson(tooHigh)!!.socksPort).isEqualTo(1080)
+        assertThat(vm().parseProfileFromJson(tooHigh)!!.socksPort).isEqualTo(65535)
 
         val tooLow = """{"tunnel_key":"k","socks_port":0}"""
-        assertThat(vm().parseProfileFromJson(tooLow)!!.socksPort).isEqualTo(1080)
+        assertThat(vm().parseProfileFromJson(tooLow)!!.socksPort).isEqualTo(1024)
+
+        val privileged = """{"tunnel_key":"k","socks_port":80}"""
+        assertThat(vm().parseProfileFromJson(privileged)!!.socksPort).isEqualTo(1024)
     }
 
     @Test