ci: Dynamic package name and bundle identifier for multi-app builds

[Copilot]

What

PR #7261 automated releases for OBF/OPFF/OPF but had critical configuration issues preventing proper builds:

Android:

• Package name hardcoded to org.openfoodfacts.scanner in build.gradle.kts - now reads from PACKAGE_NAME env var
• PACKAGE_NAME not passed to build step - now propagated in workflow
• Keystore decrypt script referenced non-existent obf_keystore.jks.gpg - now uses scanner_keystore.jks.gpg (temporary until proper migration)
• Google Play API JSON not explicitly set - now specified in Fastfile

iOS:

• Bundle identifier hardcoded to org.openfoodfacts.scanner in Xcode project - now dynamically updated via update_app_identifier in Fastfile before build

Example: Building OBF now works as:

PACKAGE_NAME: org.openbeautyfacts.scanner
APP_IDENTIFIER: org.openbeautyfacts.scanner
KEYSTORE_FILE: obf_keystore.jks

Remaining External Actions Required:

• iOS certificates for OBF/OPFF/OPF bundle IDs (not in ios-certificates repo yet)
• OBF keystore migration from old repo (OpenBeautyFactsProd.key → obf_keystore.jks.gpg)
• Separate Google Play API JSON files per app (currently all use OFF's)

See MULTI_APP_RELEASE_FIXES.md for complete details.

Screenshot

N/A - CI/CD configuration changes

Fixes bug(s)

• Fixes issues identified in ci: Automate release of Open Beauty Facts, Open Pet Food Facts, and Open Products Facts for Android and iOS #7261

Part of

• ci: Automate release of Open Beauty Facts, Open Pet Food Facts, and Open Products Facts for Android and iOS #7261

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/openfoodfacts/openfoodfacts-androidapp/contents/fastlane/envfiles
  • Triggering command: /usr/bin/curl curl -sL REDACTED (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Task</issue_title>
<issue_description>The work done in #7261 has several issues:

• it does not change the package name properly for the iOS builds
• it seems to change the package name properly for the Android build of Open Products Facts, but does not send it to the right playstore listing
• it does not seem to have the right name for the Open Beauty Facts key file.
• The ios certs are in https://github.com/openfoodfacts/ios-certificates but there's no cert yet for org.openbeautyfacts.scanner
• the android keystore for org.openfoodfacts.scanner is in https://github.com/openfoodfacts/smooth-app/tree/develop/packages/smooth_app/android/fastlane/envfiles but the Open Beauty Facts keystore is still in the old repo: https://github.com/openfoodfacts/openfoodfacts-androidapp/tree/develop/fastlane/envfiles. The way to handle it is in: https://github.com/openfoodfacts/openfoodfacts-androidapp/blob/develop/.github/workflows/android-release.yml</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Task #7263

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.