Harden acquisition integrity and update dependencies

[besendorf]

Summary

• fix collector process metadata, file hashing, package parsing, fallback path parsing, collector deployment, and result validation
• stage streamed evidence before archive insertion, surface collection and module failures, and finalize interrupted acquisitions safely
• harden unattended setup, run-state files, device-shell path handling, initialization cleanup, and bundled-tool deployment
• add collector coverage to CI and document partial acquisition outcomes
• update both Go modules, bundled Android Platform Tools, Go, GoReleaser, container images, and every GitHub Actions dependency; pin downloaded release artifacts and workflow dependencies by checksum or commit

Closes #118