fix: Make release signing configuration lazy to fix CI builds

- Remove exception throwing during configuration phase
- Add task validation to check signing config only when building release
- This fixes CI failures for dependabot PRs that don't have access to secrets

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>

Author: graycreate

app/build.gradle

@@ -24,15 +24,10 @@ android {
         release {
             // Release signing requires environment variables to be set
             // The keystore will be decoded from KEYSTORE_BASE64 in CI/CD
-            if (System.getenv("KEYSTORE_PASSWORD") != null && System.getenv("KEY_PASSWORD") != null) {
-                storeFile file("keystore.jks")
-                storePassword System.getenv("KEYSTORE_PASSWORD")
-                keyAlias System.getenv("KEY_ALIAS")?.trim() ?: "ghui"
-                keyPassword System.getenv("KEY_PASSWORD")
-            } else {
-                // Release builds require proper environment variables
-                throw new GradleException("Release builds require signing configuration. Please set KEYSTORE_PASSWORD and KEY_PASSWORD environment variables.")
-            }
+            storeFile file("keystore.jks")
+            storePassword System.getenv("KEYSTORE_PASSWORD") ?: ""
+            keyAlias System.getenv("KEY_ALIAS")?.trim() ?: "ghui"
+            keyPassword System.getenv("KEY_PASSWORD") ?: ""
         }
     }
 
@@ -128,4 +123,18 @@ dependencies {
     implementation 'com.github.oasisfeng:condom:2.5.0'
     implementation 'org.slf4j:slf4j-nop:1.7.25'
     implementation 'androidx.core:core-splashscreen:1.0.1'
+}
+
+// Validate release signing configuration before building release
+tasks.whenTaskAdded { task ->
+    if (task.name.contains('assembleRelease') || task.name.contains('bundleRelease')) {
+        task.doFirst {
+            def keystorePassword = System.getenv("KEYSTORE_PASSWORD")
+            def keyPassword = System.getenv("KEY_PASSWORD")
+            
+            if (!keystorePassword || !keyPassword) {
+                throw new GradleException("Release builds require signing configuration. Please set KEYSTORE_PASSWORD and KEY_PASSWORD environment variables.")
+            }
+        }
+    }
 }