Replaces the 2 host-docker-socket publish steps with one SSH handoff to a shell-denied forced-command on Lucy that re-verifies the APK signer, re-signs the fdroid index (keystore stays on the host), and rsyncs to Rackham. Audited 4 script rounds + 1 whole-flow round. |
||
|---|---|---|
| .. | ||
| workflows | ||