Draft privacy posture for the MVP

Purrify Music stores account, blocklist, subscription, and playback event data needed to operate the service. Playback analytics begin when the extension is installed and signed in.

The MVP should request access only to music.youtube.com and should not request broad browsing history or unrelated domains.