Add rule for AndroRAT and sync score-adjusted rules

[pulorsok]

This PR adds a new rule for AndroRAT's video-capture pattern and syncs the score-adjusted weights for all existing pool rules retrained against the AndroRAT-inclusive corpus.

New rule

#00278 — Configure video source and camcorder profile for video capture recording

The rule pairs MediaRecorder.setVideoSource with MediaRecorder.setProfile, the canonical video-recorder setup pattern used by the DroidJack fork of AndroRAT. The pair triggers only when both APIs are called on the same MediaRecorder instance inside a single parent method.

Trained discrimination:

• malware L5 hit rate: 1/589 = 0.17%
• benign L5 hit rate: 0/239 = 0.00%
• mal:ben ratio: infinity (zero benign false positive)
• trained score: -1.20 (specific but low recall — fires only on the exact video-capture pair; the negative pool-wide score reflects that this pair is uncommon across the corpus rather than the pair being non-discriminative)

Score sync

• 244 rule files touched, 243 existing rules with a score change plus the new rule
• Retrained against the same benign / malware cohort used by the earlier sync PRs, plus the 5 AndroRAT samples added for this run

Follows the sync convention of recent malware-detection PRs: #82 NGate, #80 Cerberus, #76 TangleBot, #74 Godfather.

Companion analysis report PR: ev-flow/quark-engine#954