sign-android-apk.sh now sources setup-android-signing.sh when
WEB2APP_ANDROID_KEYSTORE is unset, so signing works even when the
workflow invokes setup and sign as separate bash processes (e.g. CI re-runs
of older workflow definitions).
Co-authored-by: ShuMengya <shumengya666@outlook.com>