fix: Make release signing configuration lazy to fix CI builds

[graycreate]

Summary

• Fix CI failures for all dependabot PRs by making release signing configuration lazy
• Support both standard and GHUI-prefixed environment variables
• Only validate signing configuration when actually building release variants

Problem

All dependabot PRs are failing CI because the build.gradle file throws an exception during configuration phase when KEYSTORE_PASSWORD and KEY_PASSWORD environment variables are not set. Dependabot PRs don't have access to repository secrets.

Solution

1. Remove the exception throwing during configuration phase
2. Set empty default values for signing config to allow configuration to complete
3. Add a task-level validation that only runs when assembleRelease or bundleRelease tasks are executed
4. Support both KEYSTORE_PASSWORD/KEY_PASSWORD and GHUI_KEYSTORE_PASSWORD/GHUI_KEY_PASSWORD environment variables

Test plan

• CI should pass for this PR
• After merging, dependabot PRs should have passing CI for test and lint jobs
• Release builds should still fail if proper environment variables are not set

🤖 Generated with Claude Code

[Copilot]

Pull Request Overview

This PR fixes CI build failures for dependabot PRs by deferring release signing configuration validation until release builds are actually executed. The changes allow the Gradle configuration phase to complete successfully even when signing environment variables are not available, while still ensuring proper validation when building release variants.

• Removed exception throwing during Gradle configuration phase that was blocking all builds
• Added lazy validation that only runs when release tasks are executed
• Extended support for both standard and GHUI-prefixed environment variables

[Copilot]

Using string contains for task name matching is fragile and could match unintended tasks. Consider using more specific patterns like task.name.matches('.[aA]ssembleRelease.') or checking task types instead.

Suggested change

	if (task.name.contains('assembleRelease') || task.name.contains('bundleRelease')) {
	if (task.name.matches('.*assembleRelease') || task.name.matches('.*bundleRelease')) {

[Copilot]

[nitpick] The validation logic checks for empty strings but doesn't validate that the keystore file exists or that the passwords are valid. Consider adding a check for the keystore file existence as well.

Suggested change

	def keyPassword = System.getenv("KEY_PASSWORD") ?: System.getenv("GHUI_KEY_PASSWORD")
	def keyPassword = System.getenv("KEY_PASSWORD") ?: System.getenv("GHUI_KEY_PASSWORD")
	def keystoreFile = file("keystore.jks")
	if (!keystoreFile.exists()) {
	throw new GradleException("Release builds require a valid keystore file. Please ensure 'keystore.jks' exists in the project directory.")
	}