feat(ci): 客户端 CI 脚手架(Android+Windows, 照 jiu)——起草+Android 本地验证

- compile-android.sh: 建 libbox.aar + split-per-abi 取 arm64-v8a(~82MB, 避 232MB
  universal) + release 签名(RELEASE_KEYSTORE/KEY_PASSWORD)。本地已验证构建通过、
  libbox.so 打进 APK。
- compile-windows.sh: 复用 client/windows/installer/pangolin.iss(Inno Setup),不签名。
- release-client.sh / deploy-client.sh: 复用 pangolin lib-forgejo/lib-ssh,传 Gitea
  release + 部署最新到 pangolin1:/var/lib/pangolin/downloads(仅留最新)。
- deploy-client.yml: client-v* tag → build-android(mac)+build-windows(windows) → release-deploy(mac)。
- build.gradle: 补 release 签名 config(读 key.properties, 缺则回退 debug)。
- 待确认: keystore alias/密码(见脚本 TODO);runner 需提到 user 级;服务器 /downloads + 官网链接下一步。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013nMthbVEmQquxBRKb9Fj8u

.gitea/workflows/ci.yml

@@ -55,7 +55,11 @@ jobs:
               /mnt/scripts/ci/release-server.sh \
               /mnt/scripts/ci/deploy-server.sh \
               /mnt/scripts/ci/test.sh \
-              /mnt/scripts/ci/backup-db.sh
+              /mnt/scripts/ci/backup-db.sh \
+              /mnt/scripts/ci/compile-android.sh \
+              /mnt/scripts/ci/compile-windows.sh \
+              /mnt/scripts/ci/release-client.sh \
+              /mnt/scripts/ci/deploy-client.sh
 
       - name: shellcheck CI 脚本(ci/)
         run: |