Function manifest_allows 

pub fn manifest_allows(manifest: &SharedManifest, kind: PermissionKind) -> bool

Whether the current app may request kind.

None (no manifest) keeps the legacy prompt-on-first-use behavior; a present manifest must declare the permission explicitly.