feat(release): prepare 1.1.0 candidate

scripts/ci/sync-and-publish-forgejo-release.mjs

@@ -1,9 +1,13 @@
 // scripts/ci/sync-and-publish-forgejo-release.mjs
-// 1. Copies desktop release binaries to site/public/releases/ for direct Web downloads
-// 2. Creates official Release on git.chanpaca.net (Forgejo API) with release notes
+// Desktop-only legacy sync. Android production artifacts are intentionally
+// excluded: they may be published only by .github/workflows/release.yml after
+// signed release evidence is verified in an isolated create-only directory.
 
-import { copyFileSync, mkdirSync, existsSync, readFileSync } from 'node:fs';
+import { copyFileSync, mkdirSync, existsSync } from 'node:fs';
 import path from 'node:path';
+import credentialHelpers from '../lib/credentials.cjs';
+
+const { forgejoAuthorization } = credentialHelpers;
 
 const RELEASE_DIR = 'apps/desktop/release/1.0.0';
 const SITE_PUBLIC_RELEASES = 'site/public/releases/1.0.0';
@@ -40,17 +44,9 @@ for (const file of filesToSync) {
   }
 }
 
-// Also sync Android APK
-const APK_SRC = 'apps/mobile-rn/android/app/build/outputs/apk/debug/app-debug.apk';
-if (existsSync(APK_SRC)) {
-  copyFileSync(APK_SRC, path.join(SITE_PUBLIC_RELEASES, 'd3ro-voice-v1.0.0.apk'));
-  copyFileSync(APK_SRC, path.join(SITE_DIST_RELEASES, 'd3ro-voice-v1.0.0.apk'));
-  console.log('✓ Copied d3ro-voice-v1.0.0.apk to public distribution paths');
-}
-
 console.log('\n--- 2. Publishing Official Release v1.0.0 on Forgejo git.chanpaca.net ---');
 
-const auth = Buffer.from('yunchan:ONVI2v4J#y').toString('base64');
+const authorization = forgejoAuthorization();
 const releasePayload = {
   tag_name: 'v1.0.0',
   target_commitish: 'main',
@@ -61,11 +57,9 @@ const releasePayload = {
 - **10+ Global Ad Mediation Engine**: Header bidding waterfall with EthicalAds, Carbon Ads, Google Ad Manager, Playwire, AppLovin, and Unity Ads.
 - **Free Tier Rewarded Token Refills**: Watch 15s sponsored video to gain +50 Cloud AI tokens.
 - **100% Local Whisper Large-v3-Turbo**: Complete offline speech-to-text transcription with hardware acceleration.
-- **Android & iOS Mobile Edition**: Cross-platform mobile app support for on-the-go voice assistant workflows.
 
 ### 📦 Binary Checksums (SHA-256)
 - \`D3RO-Voice-Setup-1.0.0-x64.exe\`: \`b0ac051443151a2e34e8192f1fcf795586bbafca6eb21f01a79170c079a53ba2\` (102 MB)
-- \`d3ro-voice-v1.0.0.apk\`: (Android Release APK, 49.6 MB)
 - \`D3RO-Voice-Setup-1.0.0-x64.exe.blockmap\`: \`795b7230bec047284785f480026d51b9247d8618e083d88cfda786d1894ca367\`
 `,
   draft: false,
@@ -77,7 +71,7 @@ async function publishRelease() {
     const res = await fetch('https://git.chanpaca.net/api/v1/repos/yunchan/d3ro-voice/releases', {
       method: 'POST',
       headers: {
-        'Authorization': 'Basic ' + auth,
+        'Authorization': authorization,
         'Content-Type': 'application/json'
       },
       body: JSON.stringify(releasePayload)