CI only ran analyze and test, so it would have passed for every commit that
carried the broken release APK. Adds a release-apk job that builds the
minified artifact, runs tool/check_jni_keep_rules.sh against it, and uploads
it — turning "the shipping artifact works" into something checked rather than
assumed at tag time.
Enables flutter-action's dependency cache on both jobs, and notes that the
test step now includes the layering guard.
This does not fix the current failures: every run so far has failed at
actions/checkout, before Flutter is reached, because the runner's job
containers cannot resolve the `gitea` hostname. That is runner configuration,
not workflow content.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
mikkeli
94d96297f8