ADFA-4533: gate crash reporting by its own CrashReportConsent (default ON)

Decouple crash/error reporting from usage-analytics consent. Add CrashReportConsent
(same SharedPreferences-backed pattern as AnalyticsConsent, separate key, default ON)
and have IIABApplication gate Sentry init on it instead of AnalyticsConsent. Error
reports are operational (not behavioural telemetry) and carry no PII
(send-default-pii=false), so they can follow a different policy; flipping the default
in CrashReportConsent is the single knob if administration later makes them opt-in.

A user-facing toggle in Settings can be added as a follow-up (UI + localized strings).

Author: AppDevForAll

controller/app/src/main/java/org/iiab/controller/IIABApplication.java

@@ -35,12 +35,14 @@ public void onCreate() {
             Log.e("IIABApplication", "Error initializing Conscrypt", e);
         }
 
-        // ADFA-4533: crash reporting to GlitchTip (Sentry SDK), consent-gated like analytics.
-        // Manifest sets io.sentry.auto-init=false, so this is the only init path. No-op unless
-        // the operator opted in AND a DSN was built in (empty DSN -> SDK stays inert). Init here
-        // (before our handler) so K2GoUncaughtExceptionHandler wraps Sentry: local save -> report.
+        // ADFA-4533: crash reporting to GlitchTip (Sentry SDK), gated by its OWN opt-in
+        // (CrashReportConsent, default ON) -- independent of usage-analytics consent, since error
+        // reports are operational, not behavioural telemetry, and carry no PII
+        // (io.sentry.send-default-pii=false). No-op unless a DSN was built in (empty DSN -> SDK
+        // stays inert); manifest sets io.sentry.auto-init=false, so this is the only init path.
+        // Init here (before our handler) so K2GoUncaughtExceptionHandler wraps Sentry: save -> report.
         try {
-            if (org.iiab.controller.delivery.data.AnalyticsConsent.isEnabled(this)) {
+            if (org.iiab.controller.delivery.data.CrashReportConsent.isEnabled(this)) {
                 io.sentry.android.core.SentryAndroid.init(this);
             }
         } catch (Throwable t) {

controller/app/src/main/java/org/iiab/controller/delivery/data/CrashReportConsent.java

@@ -0,0 +1,26 @@
+package org.iiab.controller.delivery.data;
+
+import android.content.Context;
+
+/**
+ * Opt-in flag for crash / error reporting (GlitchTip via the Sentry SDK). Separate from
+ * {@link AnalyticsConsent} on purpose: error reports are operational (not behavioural
+ * telemetry) and carry no PII, so they can follow a different policy. Default ON; flip the
+ * default here if administration decides error reports must also be opt-in.
+ */
+public final class CrashReportConsent {
+
+    private static final String PREFS = "iiab_delivery";
+    private static final String KEY = "crash_reports_opt_in";
+
+    private CrashReportConsent() {
+    }
+
+    public static boolean isEnabled(Context ctx) {
+        return ctx.getSharedPreferences(PREFS, Context.MODE_PRIVATE).getBoolean(KEY, true);
+    }
+
+    public static void setEnabled(Context ctx, boolean enabled) {
+        ctx.getSharedPreferences(PREFS, Context.MODE_PRIVATE).edit().putBoolean(KEY, enabled).apply();
+    }
+}