🎉 feat(ci): aggiungi pipeline Capacitor Android riutilizzabile

- Nuovo workflow capacitor-android.yml con build debug e release
- Input configurabili: runner, node-version, java-version, build-type, output-format
- Supporto APK (sideload/test) e AAB (Play Store) via output-format
- Firma release tramite keystore in base64 (secret)
- Setup google-services.json opzionale per Firebase
- Cache npm + Gradle per performance
- Upload artifact automatico (retention 14 giorni)
- Esempi consumer: ci.yml, release.yml, maintenance.yml

examples/capacitor/ci.yml

@@ -0,0 +1,24 @@
+# Copia in: .gitea/workflows/ci.yml
+# Trigger: push su qualsiasi branch → quality gates + build debug Android
+#
+# Il debug APK viene uplodato come artifact scaricabile dalla PR.
+# Non richiede firma: usato per test interni su device fisico o emulatore.
+
+name: CI
+
+on:
+  push:
+    branches-ignore:
+      - main
+
+jobs:
+  quality-gates:
+    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/quality-gates.yml@main
+    secrets: inherit
+
+  android-debug:
+    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@main
+    secrets: inherit
+    with:
+      build-type: debug
+      output-format: apk

examples/capacitor/maintenance.yml

@@ -0,0 +1,25 @@
+# Copia in: .gitea/workflows/maintenance.yml
+# Trigger:
+#   - PR merged → cleanup branch sorgente
+#   - Ogni lunedì 08:00 → controllo dipendenze vulnerabili/obsolete
+#   - Manuale → workflow_dispatch
+
+name: Maintenance
+
+on:
+  pull_request:
+    types: [closed]
+  schedule:
+    - cron: '0 8 * * 1'
+  workflow_dispatch:
+
+jobs:
+  branch-cleanup:
+    if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
+    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@main
+    secrets: inherit
+
+  dependency-check:
+    if: gitea.event_name == 'schedule' || gitea.event_name == 'workflow_dispatch'
+    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@main
+    secrets: inherit

examples/capacitor/release.yml

@@ -0,0 +1,48 @@
+# Copia in: .gitea/workflows/release.yml
+# Trigger: git tag v* → APK firmato + AAB Play Store + release Gitea
+#
+# Secrets richiesti nel repository consumer:
+#   KEYSTORE_BASE64        — keystore codificato in base64
+#   KEYSTORE_PASSWORD      — password del keystore
+#   KEY_ALIAS              — alias della chiave
+#   KEY_PASSWORD           — password della chiave
+#   GOOGLE_SERVICES_JSON   — contenuto del file google-services.json (se Firebase)
+#
+# Prerequisito build.gradle (android/app/build.gradle):
+#   signingConfigs {
+#     release {
+#       storeFile file("keystore.jks")
+#       storePassword System.getenv("KEYSTORE_PASSWORD")
+#       keyAlias System.getenv("KEY_ALIAS")
+#       keyPassword System.getenv("KEY_PASSWORD")
+#     }
+#   }
+#
+# NOTA: i job girano in parallelo (no needs).
+# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
+
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  android-apk:
+    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@main
+    secrets: inherit
+    with:
+      build-type: release
+      output-format: apk
+
+  android-aab:
+    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@main
+    secrets: inherit
+    with:
+      build-type: release
+      output-format: aab
+
+  gitea-release:
+    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/auto-release.yml@main
+    secrets: inherit