feat(diag): dogfood log-shipping to logs.sulkta.com

Ship scrubbed device logs to our self-hosted ingest (logs.sulkta.com) so a
'green in every offline gate, broken on-device' regression (the visionOS
playback outage) can be caught end-to-end. LogShipper POSTs a scrubbed log
ring + crash stacktrace on (a) an uncaught exception (chained to the previous
handler) and (b) a 'Send logs to Kayos' Settings button. Everything runs
through LogDump.scrubLine first (URLs/video-ids/emails/tokens redacted); the
server re-scrubs. device_id = a random per-install UUID (no hardware id).
Compile-DISABLED unless the STRAW_LOGS_INGEST_TOKEN build secret is set, so
contributor forks never phone home. build.yml passes the secret to the debug
build.

.forgejo/workflows/build.yml

@@ -88,6 +88,10 @@ jobs:
           STRAW_KEYSTORE_PASS: android
           STRAW_KEY_ALIAS: androiddebugkey
           STRAW_KEY_PASS: android
+          # Dogfood log-shipping: the app is compile-DISABLED unless this is set
+          # (empty ⇒ no crash handler, no network, Settings row hidden). Repo
+          # secret; absent on contributor forks so their builds don't phone home.
+          STRAW_LOGS_INGEST_TOKEN: ${{ secrets.STRAW_LOGS_INGEST_TOKEN }}
           # Keep the 4-ABI cross-compile off the container rootfs.
           CARGO_TARGET_DIR: ${{ github.workspace }}/cargo-target
         # ionice idle class + low nice so the build yields disk/CPU to the