VoiceOS strips _voiceos_glance cards before the model sees results

In VoiceOS, the host's MCP result path (extractGlanceFromMcpResult in the app bundle) splits each tool result into { glance, cleaned }. The glance goes to the notch card, and cleaned is the result with the _voiceos_glance key removed. A separate path replaces the card with a short size placeholder instead of the HTML. So widget HTML in a glance card does not reach the model: no token cost for ~20K-character cards, and links shown only on the card, such as an OAuth connect URL, aren't exposed to the agent. Anything else in the result JSON does reach the model. Put sensitive or bulky UI-only data inside _voiceos_glance, not in sibling fields. Found by reading the obfuscated app.asar, not in the docs, so recheck after VoiceOS updates.