ci: split into fast analyze + slow release build with path gating

analyze runs on every push/PR (fast check).
release-apk only fires on push to master or workflow_dispatch (slow build).
Doc-only pushes no longer trigger any CI run.
workflow_dispatch triggers both jobs unconditionally.

.github/workflows/ci.yaml

@@ -3,11 +3,15 @@ name: CI
 on:
   push:
     branches: [ master ]
+    paths:
+      - 'lib/**.dart'
+      - 'test/**.dart'
+      - 'android/**'
+      - 'pubspec.yaml'
+      - 'pubspec.lock'
+      - 'images/**'
   pull_request:
     branches: [ master ]
-  # Manual trigger. Worth having on a self-hosted runner: when a run fails for
-  # reasons outside the repo — the runner was down, a toolchain changed — this
-  # re-runs it without an empty commit to force one.
   workflow_dispatch:
 
 # Both jobs target a self-hosted runner, by capability rather than by hostname.
@@ -47,6 +51,8 @@ jobs:
   release-apk:
     name: Release APK
     runs-on: flutter-android
+    needs: [analyze]
+    if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     steps:
       - uses: actions/checkout@v4