Fix binding errors with proper Additions and Metadata.xml transforms

- androidx.heifwriter: Remove setCallback method via Metadata.xml
- com.google.crypto.tink: Remove interface implementation via Metadata.xml
- com.squareup.okhttp3.okhttp-tls: Add Additions to implement trust manager methods by calling base

Co-authored-by: jonathanpeppers <[email protected]>

Author: Copilot

source/androidx.heifwriter/heifwriter/Transforms/Metadata.xml

@@ -1,4 +1,4 @@
 <metadata>
-  <!-- Remove problematic method that references EncoderBase.EncoderCallback which doesn't exist -->
-  <remove-node path="/api/package[@name='androidx.heifwriter']/class[@name='AvifEncoder.Builder']/method[@name='setCallback' and count(parameter)=1 and parameter[1][@type='androidx.heifwriter.EncoderBase.EncoderCallback']]" />
+  <!-- Remove method with non-existent callback type -->
+  <remove-node path="/api/package[@name='androidx.heifwriter']/class[@name='AvifEncoder.Builder']/method[@name='setCallback']" />
 </metadata>

source/com.google.crypto.tink/tink-android/Transforms/Metadata.xml

@@ -981,7 +981,7 @@
         Xamarin.Google.Crypto.Tink.Internal.IKeysetHandleInterfaceEntry
     </attr>
 
-    <!-- Remove problematic property that has wrong return type -->
-    <remove-node path="/api/package[@name='com.google.crypto.tink.shaded.protobuf']/class[@name='DescriptorProtos.FeatureSet']/method[@name='getEnforceNamingStyle' and count(parameter)=0]" />
+  <!-- Remove interface implementation that has incompatible return type -->
+  <attr path="/api/package[@name='com.google.crypto.tink.shaded.protobuf']/class[@name='DescriptorProtos.FeatureSet']" name="implements"></attr>
 
 </metadata>

source/com.squareup.okhttp3/okhttp-tls/Additions/InsecureAndroidTrustManager.cs

@@ -0,0 +1,15 @@
+namespace Square.OkHttp3.TLS.Internal;
+
+public partial class InsecureAndroidTrustManager
+{
+    // Implement interface methods with void return type by calling base methods
+    public unsafe void CheckClientTrusted(global::Java.Security.Cert.X509Certificate[]? chain, string? authType)
+    {
+        base.CheckClientTrusted(chain, authType);
+    }
+
+    public unsafe void CheckServerTrusted(global::Java.Security.Cert.X509Certificate[]? chain, string? authType)
+    {
+        base.CheckServerTrusted(chain, authType);
+    }
+}

source/com.squareup.okhttp3/okhttp-tls/Additions/InsecureExtendedTrustManager.cs

@@ -0,0 +1,25 @@
+namespace Square.OkHttp3.TLS.Internal;
+
+public partial class InsecureExtendedTrustManager
+{
+    // Implement abstract methods by calling base implementations
+    public override unsafe void CheckClientTrusted(global::Java.Security.Cert.X509Certificate[]? chain, string? authType, global::Javax.Net.Ssl.SSLEngine? engine)
+    {
+        base.CheckClientTrusted(chain, authType, engine);
+    }
+
+    public override unsafe void CheckClientTrusted(global::Java.Security.Cert.X509Certificate[]? chain, string? authType, global::Java.Net.Socket? socket)
+    {
+        base.CheckClientTrusted(chain, authType, socket);
+    }
+
+    public override unsafe void CheckClientTrusted(global::Java.Security.Cert.X509Certificate[]? chain, string? authType)
+    {
+        base.CheckClientTrusted(chain, authType);
+    }
+
+    public override unsafe void CheckServerTrusted(global::Java.Security.Cert.X509Certificate[]? chain, string? authType)
+    {
+        base.CheckServerTrusted(chain, authType);
+    }
+}