build(android): release signing + mirror/JDK setup; native-feel CSS

- Release signing via android/keystore.properties (git-ignored); build.gradle
  signs release builds when the props file is present, stays unsigned otherwise.
- android/mirror-init.gradle: injects the myket.ir Maven mirror into every
  project's buildscript (dl.google.com is unreachable here) and pins Build-Tools
  to the installed 36.0.0. Build with:
    gradlew assembleRelease bundleRelease -I mirror-init.gradle
  (JAVA_HOME must point at a JDK 21 — Capacitor 8 compiles against Java 21.)
- gitignore keystores, keystore.properties, and /dist artifacts.
- Native-app feel: kill tap-highlight, long-press callout, and stray text
  selection (inputs/messages opt back in); touch-action: manipulation.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

android/mirror-init.gradle

@@ -0,0 +1,24 @@
+// Injects the myket.ir Maven mirror into every project's buildscript + normal
+// repositories. Needed because dl.google.com is unreachable here and some
+// Capacitor subprojects declare only google()/mavenCentral() in node_modules.
+// Pass on the command line with:  gradlew -I mirror-init.gradle <task>
+allprojects {
+    buildscript {
+        repositories {
+            maven { url 'https://maven.myket.ir' }
+            maven { url 'https://mirror.abrha.net/repository/maven/' }
+        }
+    }
+    repositories {
+        maven { url 'https://maven.myket.ir' }
+        maven { url 'https://mirror.abrha.net/repository/maven/' }
+    }
+    // Build-Tools 35.0.0 isn't installed (and can't be fetched — Google is
+    // blocked here). Pin every Android module to the installed 36.0.0.
+    afterEvaluate { proj ->
+        def android = proj.extensions.findByName('android')
+        if (android != null) {
+            android.buildToolsVersion = '36.0.0'
+        }
+    }
+}