K2GO-433 ci(release): build and archive the Play AAB

Build bundlePlayRelease (signed with the injected keystore) and archive the AAB
to R2 (backup copy, one object per release by versioned filename). Also drop the
redundant GitHub Actions APK artifact upload: the release APKs already go to R2
and the GitHub Release, so the short-lived artifact only consumed quota.

Author: luisguzman-adfa

.github/workflows/android-release-build.yml

@@ -77,20 +77,14 @@ jobs:
           # In-APK traceability is unaffected: BuildConfig.GIT_SHA still records the commit.
           # K2GO-431: build both flavors. standard -> GitHub + R2 + OTA update.json (as before);
           # fdroid -> R2 only (F-Droid distributes it; it carries no in-app OTA).
-          ./gradlew assembleStandardRelease assembleFdroidRelease \
+          # K2GO-433: also build the Play AAB (play flavor); archived to R2 below.
+          ./gradlew assembleStandardRelease assembleFdroidRelease bundlePlayRelease \
             -PversionSuffix="" \
             -Pandroid.injected.signing.store.file=$(pwd)/keystore.jks \
             -Pandroid.injected.signing.store.password=$KEYSTORE_PASSWORD \
             -Pandroid.injected.signing.key.alias=$KEY_ALIAS \
             -Pandroid.injected.signing.key.password=$KEY_PASSWORD
 
-      - name: Upload APK Artifacts
-        uses: actions/upload-artifact@v6
-        with:
-          name: k2go-apks-release
-          path: controller/**/build/outputs/apk/*/release/*.apk
-          retention-days: 7
-
       # --- GITHUB RELEASES ---
 
       - name: Create GitHub Release
@@ -128,6 +122,15 @@ jobs:
               --content-type "application/vnd.android.package-archive"
           done
 
+          # K2GO-433: archive the Play AAB to R2 (backup copy, one object per release by versioned filename).
+          for aab in $(find . -path "*/build/outputs/bundle/playRelease/*.aab"); do
+            filename=$(basename "$aab")
+            echo "Uploading $filename to Cloudflare R2 ($BUCKET_NAME)..."
+            aws s3 cp "$aab" "s3://$BUCKET_NAME/$filename" \
+              --endpoint-url "https://${R2_ACCOUNT_ID}.r2.cloudflarestorage.com" \
+              --content-type "application/octet-stream"
+          done
+
       # --- OTA MANIFEST (update.json) ---
       # ADFA-4984: publish the OTA manifest LAST, after the APKs are already in R2, so it never
       # points at a missing binary. update.json is a fixed key -> it overwrites the previous manifest