Rebrand WireGuard Android to Wire VPN

- Rename package and all Java/Kotlin sources: com.wireguard.android -> page.onram.wirevpn
- applicationId -> page.onram.wirevpn, version 1.0.20260910 (520)
- New launcher icon: dark circle, white padlock with bold W
- App name 'Wire VPN' in all locales; remove donate preference
- Release signing from KEYSTORE_* env vars (CI)
- F-Droid v2: scripts/fdroid_metadata.py
- GitHub/Gitea Actions workflow: auto-build signed APK + F-Droid
  metadata/signature on every new release, attach to the release
- README + NOTICE (license inventory)

ui/build.gradle.kts

@@ -7,6 +7,13 @@ plugins {
     alias(libs.plugins.legacy.kapt)
 }
 
+val signingKeystoreFile: String? = providers.environmentVariable("KEYSTORE_FILE").orNull
+val releaseSigningEnabled =
+    signingKeystoreFile != null &&
+        providers.environmentVariable("KEYSTORE_PASSWORD").orNull != null &&
+        providers.environmentVariable("KEY_ALIAS").orNull != null &&
+        providers.environmentVariable("KEY_PASSWORD").orNull != null
+
 android {
     compileSdk = 36
     buildFeatures {
@@ -15,6 +22,17 @@ android {
         viewBinding = true
     }
     namespace = pkg
+    signingConfigs {
+        if (releaseSigningEnabled) {
+            val storeFileRef = requireNotNull(signingKeystoreFile)
+            create("release") {
+                storeFile = file(storeFileRef)
+                storePassword = providers.environmentVariable("KEYSTORE_PASSWORD").get()
+                keyAlias = providers.environmentVariable("KEY_ALIAS").get()
+                keyPassword = providers.environmentVariable("KEY_PASSWORD").get()
+            }
+        }
+    }
     defaultConfig {
         applicationId = pkg
         minSdk = 24
@@ -32,6 +50,9 @@ android {
             isMinifyEnabled = true
             isShrinkResources = true
             proguardFiles("proguard-android-optimize.txt")
+            if (releaseSigningEnabled) {
+                signingConfig = signingConfigs.getByName("release")
+            }
             packaging {
                 resources {
                     excludes += "DebugProbesKt.bin"