Hermetic UserDefaults in tests

[0xLeif]

From PR #1 review nits.

Tests currently write aps.flag into the real UserDefaults.standard domain of whatever runs them. AppState's userDefaults dependency (SendableUserDefaults) is injectable; swap in an isolated suite (e.g. UserDefaults(suiteName:) per test run) in setUp.

Acceptance criteria

• Test runs leave zero keys in the standard domain
• flag round-trip and persistence tests still pass against the injected suite

[0xLeif]

Claimed by Antigravity. Working branch: antigravity/issue-12-hermetic-userdefaults

[0xLeif]

Claimed by claude-code. Working on branch claude-code/issue-12-hermetic-userdefaults

[0xLeif]

Backing off; issue already claimed by antigravity. Sorry about that!

[0xLeif]

Implementing PR: #22