AndroidManifest: handle allowed actions

lib/main.dart

@@ -221,7 +221,27 @@ class _MyHomePageState extends State<MyHomePage> {
 
     // Subscribe to all events (initial link and further)
     final sub = appLinks.uriLinkStream.listen((uri) {
-      doSSH("innentuer-open");
+      final allowedActions = [
+        'innentuer-open',
+        'aussentuer-open',
+        'lab-close',
+        'werkstatt-open',
+        'werkstatt-close',
+      ];
+
+      final action = uri.host;
+
+      if (!allowedActions.contains(action)) {
+        ScaffoldMessenger.of(context).showSnackBar(
+          SnackBar(
+            content: Text("Unknown action: $action"),
+            duration: const Duration(seconds: 3),
+          ),
+        );
+        return;
+      }
+
+      doSSH(action);
     });
 
     // we do not await generateKey() here, as this is the intended way