Put git-lfs in the Android image, which never had it

The Android job has never fetched the model. Not because of the header
collision the desktop job hit -- that one is fixed and the desktop job
now pulls all 11 MB -- but because the image has no git-lfs at all:

    git: 'lfs' is not a git command. See 'git --help'.

The fetch step dies on its first line, `git lfs install --local`, before
any of the auth handling runs. The build then panics in dr-segment's
build script with a message telling you to run `git lfs install && git
lfs pull` -- advice that could not have worked, because the client it
names was never in the image to run.

Both jobs failing their fetch step at the same time made this look like
one bug with one cause. It was two, in two different images, and the
desktop one was noisier: it had a client, so it got as far as an HTTP
error worth reading. The android one had nothing to say beyond the name
of a missing command.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

docker/android/Dockerfile

@@ -45,6 +45,13 @@ ENV DEBIAN_FRONTEND=noninteractive \
 # ---------------------------------------------------------------------------
 RUN apt-get update && apt-get install -y --no-install-recommends \
         ca-certificates curl unzip git \
+        # git-lfs: the segmentation model is in LFS, and a plain `git` leaves a
+        # 133-byte pointer where 11 MB of weights should be. Without this the
+        # CI fetch step dies on `git: 'lfs' is not a git command` and the build
+        # then panics in dr-segment's build script -- a clear message about a
+        # missing `git lfs pull` that no amount of pulling would have fixed,
+        # because the client was never here to run.
+        git-lfs \
         # zip: package.sh adds the .so and dex to the aapt2-linked APK
         zip \
         openjdk-${JDK_VERSION}-jdk-headless \