ci: collect native APK and screenshot evidence on Gitea

Bootstrap checksum-pinned ARM64 Node before Mac checkout, upload a dedicated installable native debug APK, collect AGP test output before UTP uninstall and reject stale/missing screenshots. Add five screenshot-output regressions and enforce native shipping-source invariants. Workflow lint, 10 runner and 8 JUnit verifier regressions pass; remote execution is not yet verified.

.gitea/workflows/android.yml

@@ -37,8 +37,16 @@ jobs:
           python3 -m py_compile scripts/*.py
           python3 scripts/test-verifier.py
           python3 scripts/test-ci-runner.py
+          python3 scripts/test-integration-evidence.py
       - name: Check dependencies against OSV
         run: python3 scripts/check-dependencies.py
+      - name: Upload installable native debug preview
+        uses: https://gitea.com/actions/upload-artifact@c6a3b2bd78b3985e4b2f15397fec357f0fd808de
+        with:
+          name: android-native-debug-apk
+          path: android/app/build/outputs/apk/debug/app-debug.apk
+          if-no-files-found: error
+          retention-days: 14
       - uses: https://gitea.com/actions/upload-artifact@c6a3b2bd78b3985e4b2f15397fec357f0fd808de # v3.2.2-node20 (Gitea artifact protocol)
         if: always()
         with:
@@ -96,7 +104,9 @@ jobs:
         if: always()
         with:
           name: android-device-test-reports-${{ matrix.api }}
-          path: android/app/build/reports/androidTests/
+          path: |
+            android/app/build/reports/androidTests/
+            android/app/build/outputs/native-screenshots/
           retention-days: 14
       - name: Remove only this job's allocated upstream fixture
         if: always()