Standardize url bar icon state to match other platforms

[laghee]

Task/Issue URL: https://app.asana.com/1/137249556945/project/1201870266890790/task/1210936487262413?focus=true

Description

Our other browsers handle these states similarly for the most part, so we should adapt Android to match other platforms. As it stands, we get breakage reports from Android users whenever the privacy shield is showing the red warning dot, which means we get a lot of non-actionable feedback for people's router IPs and for sites we're trying to speculatively mitigate breakage on (turning off blocking to see if it reduces reports).

Steps to test this PR

• Navigate to noaprints.com and marvel.com (both have protection disabled in the config)
• Confirm for each that you see the normal green privacy shield state for both (though if you click into the dashboard, the fact that protections are disabled is shown & the menu item shows as "enable privacy protection"
• Navigate to your local network address(es) and confirm that you see the globe icon rather than the UNPROTECTED state (privacy shield with a red dot)

UI changes

Before	After

---

Note

Standardizes omnibar icon and privacy shield behavior to align with other platforms.

• Omnibar: show Globe icon for localhost/private network URLs by checking Uri.isLocalUrl; falls back to PrivacyShield only for non-local URLs
• Privacy shield: SiteMonitor.privacyProtection now returns UNPROTECTED only for user-allowlisted domains or non-HTTPS; remote-config exceptions no longer show as unprotected
• Utilities/tests: add Uri.isLocalUrl (localhost, 127.0.0.0/8, 10/8, 172.16/12, 192.168/16) with comprehensive unit tests

^{Written by Cursor Bugbot for commit 2bd886f. This will update automatically on new commits. Configure here.}

[jonathanKingston]

Probably simpler to rely on the libraries themselves (will support ipv6 too). Assuming we don't already have a method like this?

val Uri.isLocalUrl: Boolean
    get() {
        if (scheme == "file") return true

        val h = host?.lowercase() ?: return false
        if (h == "localhost") return true

        val addr = runCatching { InetAddresses.parseNumericAddress(h) }.getOrNull() ?: return false
        return addr.isLoopbackAddress || addr.isSiteLocalAddress
    }

[jonathanKingston]

(there's a bunch of others here folk use like blah.local and localhost.localhost)

[jonathanKingston]

@aitorvs do you think we could add this as a shared method to https://github.com/duckduckgo/url_predictor as a is_local?

[karlenDimla]

@laghee The current solution you have only considers ipv4. Seem like what @jonathanKingston is suggesting in https://github.com/duckduckgo/Android/pull/7436/files#r2662628187 is a more complete solution so I think we should update to that instead.