ci: test pull requests and release to Maven Central on version tags

[boehlerlukas]

Automates Android releases. Push the tag X.Y.Z and GitHub Actions publishes and releases to Maven Central. The manual Central Portal step is gone.

• Publishing: maven-push.gradle is replaced by com.vanniktech.maven.publish 0.34.0 (the newest version that works with Gradle 8.10.2 / AGP 8.8), set to auto-release and sign all publications.
  • Parity checked with publishToMavenLocal: same files as 18.1.0 (aar, sources, module, pom, .asc, no javadoc).
  • The POM is byte-identical to the old setup's output from the same commit.
  • POM_INCEPTION_YEAR removed (unused; the plugin would have added it to the POM).
• ci.yml (pull requests and pushes to master): :gleap:testDebugUnitTest :gleap:assembleRelease on JDK 17.
• release.yml (tag X.Y.Z, plus a workflow_dispatch dry run that publishes to Maven Local with real signing):
  • checks the tag against VERSION_NAME, that the tag is on master, and that the version isn't on Central yet;
  • runs the tests, then publishAndReleaseToMavenCentral;
  • polls repo1 for the POM (30 min);
  • creates the GitHub release from the CHANGELOG section.
• README: new "Releasing" section.

Secrets: MAVEN_CENTRAL_USERNAME, MAVEN_CENTRAL_PASSWORD, SIGNING_KEY (ASCII-armored), SIGNING_KEY_ID (short id), SIGNING_KEY_PASSWORD.

Local publishing: ~/.gradle/gradle.properties needs mavenCentralUsername / mavenCentralPassword (same values as NEXUS_*). The signing.* keys work unchanged.

Before tagging 19.0.0:

• Publish io.gleap:gleap-okhttp-interceptor:19.0.0 (Release 19.0.0 as an empty artifact and deprecate in favour of the interceptor built into Android SDK 19.0.0 OKHttpInterceptor#2). The SDK constraint pins it, and it isn't on Central yet.
• The ## Unreleased CHANGELOG section (authenticated files) sits above ## 19.0.0. Release it as its own version or fold it into 19.0.0.

Verification: 180/180 unit tests pass, actionlint is clean, and the CI in-memory signing path was checked with a throwaway key. A real upload hasn't been tested yet; the first one should be the workflow_dispatch dry run once the secrets are set.

🤖 Generated with Claude Code