feat: add customBaseURL CNAME support to NetworkOptions

[jamesnrokt]

Summary

Port of #701 onto workstation/6.0-Release, with the Rokt kit passthrough included since kits now live in this repo.

Adds NetworkOptions.Builder.setCustomBaseURL(String) which routes all mParticle endpoint traffic (config, events, identity, alias, audience) through a single HTTPS CNAME host. Mirrors iOS work from mparticle-apple-sdk#760.

What changed

Core (android-core):

• NetworkOptions: new customBaseURL field + getter; Builder.setCustomBaseURL(@NonNull String) validates HTTPS scheme, requires a host, and stores host(:port) only — path/query/fragment ignored.
• MParticleBaseClientImpl.getUrl: when customBaseURL is set:
  • Skips the pod prefix (the CNAME's CDN handles regional routing).
  • Logs a warning and ignores any per-endpoint DomainMapping and overridesSubdirectory.
  • Rewrites paths to: /config/v4/<key>/config, /nativeevents/v2/<key>/events, /identity/v1/<path>, /nativeevents/v1/identity/<key>/alias, /nativeevents/v1/<key>/audience.
• proguard.pro: adds -keep rules for MParticle$Internal and ConfigManager.getNetworkOptions() so the Rokt kit can navigate the public extension surface after R8 minification.

Rokt kit (kits/rokt/rokt):

• In RoktKit.onKitCreate, reads MParticle.getInstance().Internal().configManager.networkOptions.customBaseURL and forwards it to Rokt.setCustomBaseURL(URL("https://<host>")) before Rokt.init.
• Logic extracted into a private applyCustomBaseURLIfSet() method for testability.
• No-op when customBaseURL is null, empty, or MParticle is uninitialized.

Pre-merge dependency

The Rokt kit's com.rokt:roktsdk:4.14.0 does not yet expose Rokt.setCustomBaseURL(URL). A follow-up commit will bump the Rokt SDK to the 5.x release containing that API (currently on workstation/5.0.0 and main in ROKT/sdk-android-source, see PR #993). The kit change itself is correct against the upcoming API.

Test plan

• Added 9 androidTest cases in MParticleBaseClientImplTest (HTTPS validation, path/query stripping, port preservation, malformed-URL rejection, and per-endpoint URL routing).
• Added 6 unit tests in kits/rokt/rokt's RoktKitTests for the kit passthrough (forwards URL, preserves port, no-op when null/empty/uninitialized).
• :android-core:testDebugUnitTest passes locally; :android-core:compileDebugAndroidTestKotlin compiles.
• :kits:android-rokt:rokt:testDebugUnitTest passes locally against a SNAPSHOT roktsdk (60 tests, 0 failures).

🤖 Generated with Claude Code

[cursor]

PR Summary

Medium Risk
Changes how all core endpoints build request hosts/paths when customBaseURL is set, which can affect routing/pinning behavior in production. Risk is mitigated by validation, warnings on conflicting settings, and added integration/unit tests covering URL generation and JSON persistence.

Overview
Adds a NetworkOptions.customBaseURL option (validated HTTPS URL, stored as host[:port], persisted in toJson/withNetworkOptions) to route all mParticle traffic through a single CNAME host.

Updates MParticleBaseClientImpl.getUrl to prioritize customBaseURL over per-endpoint DomainMapping, apply custom CDN-style path prefixes per endpoint, and warn/ignore unsupported combinations (domain mapping and overridesSubdirectory) while still generating a default fallback URL for pinning/connection tests.

Updates the Rokt kit to forward the configured customBaseURL to the Rokt SDK (Rokt.setCustomBaseURL) during initialization, and adds Proguard keep rules plus new androidTest/unit tests validating routing, validation (HTTPS/malformed/path stripping/port), and passthrough behavior.

^{Reviewed by Cursor Bugbot for commit 8935e6b. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit e75def6. Configure here.}

[sonarqubecloud]

Quality Gate passed

Issues
5 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud