ADFA-4918 fix(ci): pass GITHUB_TOKEN to release & Firebase builds

.github/workflows/android-release-build.yml

@@ -62,6 +62,10 @@ jobs:
 
       - name: Build and Sign Release APKs
         env:
+          # :app:syncNativeArtifacts queries the GitHub API for the pinned binaries
+          # release; unauthenticated it gets HTTP 403 (shared-runner rate limit), so
+          # provide the auto token for the M15 authenticated-retry fallback (build.gradle).
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
           KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
           KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}

.github/workflows/firebase-distribution.yml

@@ -148,6 +148,10 @@ jobs:
       # artifacts published to GitHub/R2 (separate workflow); this workflow never runs on tags.
       - name: Build and Sign APK
         env:
+          # :app:syncNativeArtifacts queries the GitHub API for the pinned binaries
+          # release; unauthenticated it gets HTTP 403 (shared-runner rate limit), so
+          # provide the auto token for the M15 authenticated-retry fallback (build.gradle).
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
           KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
           KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}

controller/README.md

@@ -41,6 +41,6 @@ K2Go is built on top of the **[Termux](https://github.com/termux/termux-app)** p
 
 Our deepest thanks to the **Termux team and contributors** for their foundational work, without which K2Go would not be possible.
 
-## Disclaimer
+## Disclaimer!
 
 **This software is under active development and is provided "as is", without warranty of any kind.** It is intended for research, testing, and educational development. Because it interacts heavily with Android's background services and networking stack, it may behave differently across various device manufacturers (OEMs). It is not yet guaranteed for stable, unattended production deployment. Use at your own risk.

controller/app/src/main/java/org/iiab/controller/redesign/LibraryHomeFragment.java

@@ -254,3 +254,5 @@ private static int probe(String endpoint) {
         }
     }
 }
+
+// CI test (ADFA-4812): a push to a non-main branch is built and distributed to Firebase — validates ADFA-4810. Throwaway; do not merge.