Verifies that ProGuard/R8 obfuscation actually renamed configured sensitive classes, not just that minification is enabled. Parses the R8 mapping.txt, checks a developer-declared list of sensitive classes, and generates a console/JSON report — optionally failing the build as a CI security gate.