Open the bundled manual from Help and from Settings

The packages now carry the manual, but nothing in the application opened
it: the help sheet listed gestures and stopped there.

The help sheet gains a Manual button beside Done, and Settings a Manual
row under About beside the version. Both go through dr_ui::manual, which
finds the installed page through dr_plat::system_data_dirs (the package's
share directory on Linux, the executable's directory on Windows), and a
development build also in the checkout it was compiled from. A copy with
no manual says so on the status line rather than doing nothing.

On the desktop the page goes to the system browser. A section is a URL
fragment, and xdg-open's generic mode and Windows' FileProtocolHandler
both turn a file: URL into a path and drop the fragment, so a section is
opened through a one-line redirect page written to the data directory:
the opener gets a plain path, which every opener keeps, and the browser
follows the redirect to index.html#section itself. The launcher behind
the sign-in's open_in_browser is split out so both share it; the https
check stays with the sign-in.

Android has no path to give a browser: an asset is not a file, a copy in
private storage is unreadable to other apps, a file: URI across apps is
refused, and a content: URI leaves the browser resolving every picture
against the provider. So ManualActivity, a WebView reading
file:///android_asset/manual/index.html straight out of the APK, shows
it, started by class name with the section as an extra. JavaScript is
off, links off the page go to the browser, and the theme is day-night so
the page's own light and dark follow the system. A test checks that the
manifest, the Java class and dr_ui agree on the name and the extra.

docs/manual/README.md

@@ -238,6 +238,11 @@ a private X server and records each scene; `record.sh <library>` re-makes
 every picture here. Run it after a change to the interface and commit what
 changed. The pictures are in LFS.
 
+The application carries this page. `cargo run -p traceability -- manual`
+renders it to `index.html` beside it, which the packages install with the
+pictures and the app opens from Help, from Settings, and from the "See it"
+link beside a gesture on the help sheet. CI fails when the two differ.
+
 Making it the first time turned up nine faults, each fixed in its own
 commit before the pictures were taken: the folder picker could not choose
 the top level, month headings overprinted each other, a category mask

docs/manual/index.html

@@ -291,6 +291,10 @@ here, for the obvious reason — <a href="https://gitea.tourolle.paris/dtourolle
 a private X server and records each scene; <code>record.sh &lt;library&gt;</code> re-makes
 every picture here. Run it after a change to the interface and commit what
 changed. The pictures are in LFS.</p>
+<p>The application carries this page. <code>cargo run -p traceability -- manual</code>
+renders it to <code>index.html</code> beside it, which the packages install with the
+pictures and the app opens from Help, from Settings, and from the "See it"
+link beside a gesture on the help sheet. CI fails when the two differ.</p>
 <p>Making it the first time turned up nine faults, each fixed in its own
 commit before the pictures were taken: the folder picker could not choose
 the top level, month headings overprinted each other, a category mask