Code review fixes: app 2.9.0, server 2.2.0

Telemetry no longer loses queued batches. The server drops a bad value,
or a sample without a plausible time, instead of rejecting the batch,
and answers 200 with what it dropped. The app sends only values inside
the server's ranges (speed as a magnitude, so reversing is fine) and no
samples before the head unit's clock is set.

Server:
- Pairing hands out and accepts a token only after the device is saved;
  a failed save leaves the request pending.
- A paired token serves only the installation id it was paired with
  (403 otherwise); the shared INGEST_TOKEN still serves any.
- Wrong-password lockouts and open pairing requests are limited per
  client address (last X-Forwarded-For entry), so a stranger cannot
  lock the owner out; a car starting again replaces its own request.
- ABRP forwarding skips samples stamped ahead of the server's clock,
  which used to stop it until a restart.

App:
- Settings written to plaintext during a keystore failure move back
  into encrypted storage; the stored installation id wins.
- The installation id is derived from ANDROID_ID on first start, so a
  reinstall finds its history; a stored or imported id still wins.
- The scanned config file is deleted after import (it holds the token).
- GPS stops while live telemetry is off or the server unconfigured, and
  pauses while parked and idle, keeping the fix the car parked with.
- Range estimates use the monotonic clock.
- One HTTP helper (ServerHttp) for telemetry, sync and pairing.
- Last Turkish strings translated; mise logs shows the NilsMG4 tags.

Grafana reads InfluxDB with its own read-only token (new grafana-influx
Secret, created by hand as described in k8s/README.md).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QLJfZQZeAKAwSqViTmLzki

app/src/main/java/com/evsuite/abrp/MainActivity.java

@@ -774,13 +774,28 @@ public class MainActivity extends AppCompatActivity {
         return dirs.length > 0 && dirs[0] != null ? dirs[0].getAbsolutePath() : "";
     }
 
+    /**
+     * Imports a scanned file and then deletes it: it holds the ingest token in plaintext, maybe
+     * on a USB stick, and the settings live in encrypted storage from now on.
+     */
     private void importConfig(java.io.File file) {
         String text = readText(file);
         if (text.isEmpty()) {
             setConnectionStatus(COLOR_ERROR, getString(R.string.import_err_read));
             return;
         }
-        applyConfig(text);
+        if (!applyConfig(text)) return;
+        boolean deleted;
+        try {
+            deleted = file.delete();
+        } catch (SecurityException e) {
+            deleted = false;
+        }
+        if (deleted) {
+            setConnectionStatus(COLOR_OK, getString(R.string.import_ok_deleted));
+        } else {
+            setConnectionStatus(COLOR_ERROR, getString(R.string.import_ok_not_deleted, file.getAbsolutePath()));
+        }
     }
 
     private void importConfig(Uri uri) {
@@ -800,11 +815,11 @@ public class MainActivity extends AppCompatActivity {
      * only the token does not wipe the URL. Server settings are validated and saved together;
      * cadence keys go to the plain prefs the same way the Upload page writes them.
      */
-    private void applyConfig(String text) {
+    private boolean applyConfig(String text) {
         ConfigImport config = ConfigImport.parse(text);
         if (config.isEmpty()) {
             setConnectionStatus(COLOR_ERROR, getString(R.string.import_err_empty));
-            return;
+            return false;
         }
         ServerConfig current = ServerConfig.get(this);
         if (config.serverUrl != null || config.token != null || config.installationId != null) {
@@ -817,7 +832,7 @@ public class MainActivity extends AppCompatActivity {
                 if (config.serverUrl != null) serverUrlInput.setText(config.serverUrl);
                 if (config.token != null) serverTokenInput.setText(config.token);
                 if (config.installationId != null) installationIdInput.setText(config.installationId);
-                return;
+                return false;
             }
         }
         SharedPreferences.Editor edit = prefs.edit();
@@ -828,6 +843,7 @@ public class MainActivity extends AppCompatActivity {
         bindCadenceControls();
         setConnectionStatus(COLOR_OK, getString(R.string.import_ok));
         refreshStatus();
+        return true;
     }
 
     // ---------- Upload page ----------
@@ -993,15 +1009,16 @@ public class MainActivity extends AppCompatActivity {
      * The two range estimates. Both need the car to be moving on battery power; the average
      * also needs a minute or more of driving, which the service has usually collected already.
      */
-    private void refreshRangeEstimates(EnergySnapshot s, long nowMs) {
+    private void refreshRangeEstimates(EnergySnapshot s) {
         RangeEstimator estimator = RangeEstimator.shared();
-        estimator.add(nowMs, s.getBatteryPowerKw(), s.getSpeedKmh());
+        long monotonicMs = android.os.SystemClock.elapsedRealtime();
+        estimator.add(monotonicMs, s.getBatteryPowerKw(), s.getSpeedKmh());
         Double remaining = RangeEstimator.remainingKwh(s.getSocPercent(), usableKwh());
         showEstimate(vehRangePower, vehRangePowerNote,
                 RangeEstimator.instant(remaining, s.getBatteryPowerKw(), s.getSpeedKmh()),
                 R.string.range_not_driving);
         showEstimate(vehRangeAverage, vehRangeAverageNote,
-                estimator.average(remaining, nowMs), R.string.range_waiting);
+                estimator.average(remaining, monotonicMs), R.string.range_waiting);
     }
 
     private void showEstimate(TextView value, TextView note, RangeEstimator.Estimate e, int whyNot) {
@@ -1041,7 +1058,7 @@ public class MainActivity extends AppCompatActivity {
             vehHvac.setText(fmt(s.getClimate().getDriverTargetCelsius(), "%.0f °C"));
 
             vehCharging.setText(chargingLabel(s));
-            refreshRangeEstimates(s, System.currentTimeMillis());
+            refreshRangeEstimates(s);
 
             vehTireFl.setText(fmt(s.getTirePressures().getFrontLeftKpa(), "%.0f kPa"));
             vehTireFr.setText(fmt(s.getTirePressures().getFrontRightKpa(), "%.0f kPa"));