SPEC v0.1 and project rules for Kvitt

Write SPEC.md v0.1 from the owner interview (requirements, data model,
stack, API outline, security, business rules, deployment, milestones,
UX sprint brief, contracts). Fill the CLAUDE.md blanks, move the Gradle
pin files into android/, point the tools at android/ and server/, and
record the git bootstrap exception in the handoff.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tools/dependency-report/latest.py

@@ -1,5 +1,5 @@
 #!/usr/bin/env python3
-"""Version drift report for gradle/libs.versions.toml (Plan 09, D-056).
+"""Version drift report for android/gradle/libs.versions.toml (Plan 09, D-056).
 
 Reads every [versions] entry, finds an artifact that uses it in [libraries] or [plugins], and asks Google Maven and
 Maven Central for that artifact's maven-metadata.xml. Prints one table: current, latest stable, newest (only where a
@@ -19,7 +19,7 @@ import urllib.request
 import xml.etree.ElementTree as ET
 from pathlib import Path
 
-ROOT = Path(__file__).resolve().parents[2]
+ROOT = Path(__file__).resolve().parents[2] / "android"  # the Gradle project lives in android/
 REPOS = ["https://dl.google.com/android/maven2", "https://repo1.maven.org/maven2"]
 # Catalog entries that are SDK levels, not artifacts.
 NOT_ARTIFACTS = {"minSdk", "compileSdk", "targetSdk"}