refactor(qrz): move the grid lookup out of the composable

LogTab read the QRZ cookie straight out of SharedPreferences through LocalContext,
inside composition, on every submission - disk access in a composable, around the
repository layer, with the client referenced by fully-qualified name inline. And it
did `if (grid != null)`, so a lookup that failed for any reason left the QSO without
a grid and told the operator nothing.

IQrzGridLookup lives in core:domain, QrzGridLookup in core:data owns the cookie read,
and the view model exposes lookupGrid. The composable now takes a callback and handles
each outcome: a locator is attached, no locator on file passes quietly because nothing
is wrong, an expired cookie says to paste a fresh one, and an unreachable QRZ says so.
That is what the four-outcome QrzGrid type from ce68f487 was for - until now nothing
consumed it and the old nullable client was still the one being called.

Note for anyone extending RadarScreen: the local holding the view model cannot be
referenced as `viewModel` inside a lambda, because that name also resolves to the
composable factory function. Hence the explicitly typed local.

The old QrzGridClient is now unused here but left in place; removing it belongs with
the settings screen, which still calls it to validate a pasted cookie.

core/data/src/main/java/com/rtbishop/look4sat/core/data/injection/MainContainer.kt

@@ -69,6 +69,8 @@ import kotlinx.coroutines.SupervisorJob
 import kotlinx.coroutines.flow.MutableStateFlow
 import kotlinx.coroutines.flow.StateFlow
 import kotlinx.coroutines.flow.asStateFlow
+import com.rtbishop.look4sat.core.data.qrz.QrzGridLookup
+import com.rtbishop.look4sat.core.domain.qrz.IQrzGridLookup
 import okhttp3.OkHttpClient
 import com.rtbishop.look4sat.core.data.wavelog.LotwSatellitesRepo
 
@@ -134,6 +136,22 @@ class MainContainer(private val context: Context) : IMainContainer {
 
     override fun provideLotwSatellitesRepo(): com.rtbishop.look4sat.core.domain.wavelog.ILotwSatellitesRepo = lotwRepo
 
+    /**
+     * QRZ grid lookup. Holds the cookie read so no composable has to: the log screen used to pull
+     * it out of SharedPreferences through LocalContext, putting disk access inside composition.
+     */
+    private val qrzGridLookup: QrzGridLookup by lazy {
+        QrzGridLookup(
+            context.getSharedPreferences(QrzGridLookup.PREFS_NAME, Context.MODE_PRIVATE),
+            OkHttpClient.Builder()
+                .connectTimeout(15, java.util.concurrent.TimeUnit.SECONDS)
+                .readTimeout(20, java.util.concurrent.TimeUnit.SECONDS)
+                .build()
+        )
+    }
+
+    override fun provideQrzGridLookup(): IQrzGridLookup = qrzGridLookup
+
     override fun provideBluetoothReporter(): IReporter {
         val manager = context.getSystemService(Context.BLUETOOTH_SERVICE) as BluetoothManager
         val rc = settingsRepo.rcSettings.value

core/data/src/main/java/com/rtbishop/look4sat/core/data/qrz/QrzGridLookup.kt

@@ -0,0 +1,55 @@
+/*
+ * Look4Sat. Amateur radio satellite tracker and pass predictor.
+ * Copyright (C) 2019-2026 Arty Bishop and contributors.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+package com.rtbishop.look4sat.core.data.qrz
+
+import android.content.SharedPreferences
+import com.rtbishop.look4sat.core.domain.qrz.IQrzGridLookup
+import com.rtbishop.look4sat.core.domain.qrz.QrzGrid
+import kotlinx.coroutines.CoroutineDispatcher
+import kotlinx.coroutines.Dispatchers
+import okhttp3.OkHttpClient
+
+/**
+ * Grid lookup backed by the cookie the operator pasted into settings.
+ *
+ * Owns the cookie read so the log screen does not: a composable used to pull it out of
+ * SharedPreferences through LocalContext on every submission, which put disk access inside
+ * composition and went around the repository layer.
+ */
+class QrzGridLookup(
+    private val preferences: SharedPreferences,
+    httpClient: OkHttpClient,
+    dispatcher: CoroutineDispatcher = Dispatchers.IO
+) : IQrzGridLookup {
+
+    private val source = QrzGridSource(httpClient, dispatcher)
+
+    override suspend fun lookup(callsign: String): QrzGrid {
+        val cookie = preferences.getString(COOKIE_KEY, "").orEmpty()
+        // No cookie and an expired one call for the same thing from the operator, so they report
+        // the same way rather than adding a fourth outcome nobody could act on differently.
+        if (cookie.isBlank()) return QrzGrid.SignedOut
+        return source.lookupGrid(callsign, cookie)
+    }
+
+    companion object {
+        /** Where the settings screen stores what the operator pasted. */
+        const val PREFS_NAME = "qrz_cookie"
+        const val COOKIE_KEY = "cookie"
+    }
+}

core/domain/src/main/java/com/rtbishop/look4sat/core/domain/repository/IMainContainer.kt

@@ -50,6 +50,9 @@ interface IMainContainer {
     fun provideWavelogUploader(): com.rtbishop.look4sat.core.domain.wavelog.WavelogUploader
 
     fun provideLotwSatellitesRepo(): com.rtbishop.look4sat.core.domain.wavelog.ILotwSatellitesRepo
+
+    /** QRZ grid lookup, so the log screen never touches the stored cookie itself. */
+    fun provideQrzGridLookup(): com.rtbishop.look4sat.core.domain.qrz.IQrzGridLookup
 }
 
 data class MutualPassData(