android(net): second occurrence of '*/' in Api.kt KDoc

Caught by the next CI iteration (run 26395453436) — there were two
literal '*/'-bearing references in the same docstring; the first
fix only got the first one. Now both rewritten to '/public sub-path'.

Author: pulkitpareek18

android/app/src/main/java/dev/zeroauth/android/net/Api.kt

@@ -35,8 +35,9 @@ import java.util.concurrent.TimeUnit
  *     cookie. Neither is available on the phone.
  *
  * The W3 contract drift is real and worth flagging in the exit report:
- * `*/public` does NOT exist on the backend today. This Retrofit binding
- * is wired so the phone is ready when the backend opt-in lands, and
+ * the `/public` sub-path does NOT exist on the backend today. This
+ * Retrofit binding is wired so the phone is ready when the backend
+ * opt-in lands, and
  * the ScanViewModel treats any 4xx from this call as "fine, fall back
  * to QR-only parsing." There is no path in the demo where this call
  * MUST succeed.