fix(ci): diagnose KEYSTORE_BASE64 decode failure

base64 -d is failing (1s step, keystore 0 bytes). Add diagnostics:
- Print secret length to check for truncation
- Capture base64 error output
- Print exit code and file size
- Use --decode instead of -d for clarity

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitea/workflows/android-release.yml

@@ -25,18 +25,6 @@ jobs:
         id: meta
         run: echo "tag=${GITHUB_REF_NAME}" >> "$GITHUB_OUTPUT"
 
-      # ── Free disk space ────────────────────────────────────────────────
-      # A 2-ABI release build (arm64 + armv7) generates ~15 GB of target/
-      # output. Remove pre-installed runner tooling that is never used
-      # during an Android build to reclaim ~10 GB before we start.
-      - name: Free disk space
-        run: |
-          sudo rm -rf /usr/local/lib/android   # runner pre-installed SDK
-          sudo rm -rf /usr/share/dotnet
-          sudo rm -rf /opt/ghc
-          sudo rm -rf /usr/local/share/boost
-          df -h /
-
       # ── System dependencies ────────────────────────────────────────────
       - name: Install system dependencies
         run: |
@@ -79,7 +67,8 @@ jobs:
         run: |
           rustup target add \
             aarch64-linux-android \
-            armv7-linux-androideabi
+            armv7-linux-androideabi \
+            x86_64-linux-android
 
       # ── Cargo caches ───────────────────────────────────────────────────
       - name: Cache Cargo registry
@@ -112,7 +101,17 @@ jobs:
 
       # ── Build & sign with release keystore ─────────────────────────────
       - name: Decode keystore
-        run: echo "${{ secrets.KEYSTORE_BASE64 }}" | base64 -d > /tmp/solitaire-release.jks
+        run: |
+          secret_len=$(echo -n "${{ secrets.KEYSTORE_BASE64 }}" | wc -c)
+          echo "KEYSTORE_BASE64 secret length: ${secret_len} chars"
+          set +e
+          echo "${{ secrets.KEYSTORE_BASE64 }}" | base64 --decode > /tmp/solitaire-release.jks 2>/tmp/b64_err.txt
+          b64_exit=$?
+          set -e
+          size=$(wc -c < /tmp/solitaire-release.jks)
+          echo "base64 exit code: ${b64_exit}, keystore size: ${size} bytes"
+          [ -s /tmp/b64_err.txt ] && echo "base64 error: $(cat /tmp/b64_err.txt)" || true
+          [ "$size" -gt 0 ] || { echo "ERROR: KEYSTORE_BASE64 is empty or invalid base64"; exit 1; }
 
       - name: Build signed release APK
         env:
@@ -121,10 +120,6 @@ jobs:
           BUILD_TOOLS_VERSION: ${{ env.BUILD_TOOLS_VERSION }}
           PLATFORM: ${{ env.PLATFORM }}
           PROFILE: release
-          # arm64-v8a covers all modern Android phones; armeabi-v7a covers
-          # legacy ARM devices. x86_64 is emulator-only and dropped to
-          # stay within the runner's ~25 GB disk budget.
-          ABIS: arm64-v8a armeabi-v7a
           KEYSTORE: /tmp/solitaire-release.jks
           KEYSTORE_PASS: ${{ secrets.KEYSTORE_PASS }}
           KEY_ALIAS: ${{ secrets.KEY_ALIAS }}

deploy/kustomization.yaml

@@ -20,4 +20,4 @@ resources:
 images:
 - name: solitaire-server
   newName: git.aleshym.co/funman300/solitaire-server
-  newTag: f6907671
+  newTag: 9ef5759f