ci(release): sign Android APK with production release keystore

Author: AmrMsCLL

.github/workflows/release.yml

@@ -85,9 +85,19 @@ jobs:
         env:
           STRATA_VERSION_NAME: ${{ steps.version.outputs.version }}
           STRATA_VERSION_CODE: ${{ steps.version.outputs.code }}
+          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
+          ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
+          ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
+          ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
         run: |
+          set -euo pipefail
+          if [ -n "$ANDROID_KEYSTORE_BASE64" ]; then
+            echo "$ANDROID_KEYSTORE_BASE64" | base64 -d > "$RUNNER_TEMP/strata-release.jks"
+            export ANDROID_KEYSTORE_PATH="$RUNNER_TEMP/strata-release.jks"
+          fi
           chmod +x gradlew
           ./gradlew assembleRelease --no-daemon
+          rm -f "$RUNNER_TEMP/strata-release.jks"
           cp app/build/outputs/apk/release/app-release.apk "$RUNNER_TEMP/strata.apk"
           cp app/build/outputs/apk/release/app-release.apk "$RUNNER_TEMP/strata-${STRATA_VERSION_NAME}.apk"
 

app/frontend/android/app/build.gradle

@@ -27,6 +27,8 @@ android {
                 storePassword System.getenv("ANDROID_KEYSTORE_PASSWORD")
                 keyAlias System.getenv("ANDROID_KEY_ALIAS")
                 keyPassword System.getenv("ANDROID_KEY_PASSWORD")
+                v1SigningEnabled true
+                v2SigningEnabled true
             }
         }
     }