sign-android-apk.sh now sources setup-android-signing.sh when
WEB2APP_ANDROID_KEYSTORE is unset, so signing works even when the
workflow invokes setup and sign as separate bash processes (e.g. CI re-runs
of older workflow definitions).
Co-authored-by: ShuMengya <shumengya666@outlook.com>
- Use workspace-scoped npm ci to avoid compiling better-sqlite3 on Windows
(Node 24 has no prebuilt binaries and node-gyp fails in CI)
- Source setup-android-signing.sh so WEB2APP_ANDROID_* vars reach sign script
Co-authored-by: ShuMengya <shumengya666@outlook.com>