parseSimpleYaml only matched `key: value` lines (regex required `.+`
after the colon), so `permissions:` followed by indented `- database`
list items was never parsed. This caused app bridge methods like
db.query to always fail with "Unknown method or insufficient
permissions" even when the app manifest granted the database permission.
Change the regex to `.*` to also match keys with no inline value, then
collect subsequent indented `- item` lines into an array.
Closes#87
7052395b0e