Migrate hosting from Codeberg to GitLab. Update the LGPL
source-availability notices in THIRD_PARTY_NOTICES to
gitlab.com/0xlena/scrcpy-android.

Cut 0.2 for the F-Droid submission: it carries the opus playback fix,
transactional session bring-up and teardown, the activity hardening,
and the release-input verification. versionCode 2 corresponds to the
already-written changelog for the store listing.

Pin and verify what goes into a release: JitPack confined to the
SPAKE2 module via exclusiveContent, the vendored subtree pulled by
commit SHA instead of a mutable tag, a pinned Docker base digest with
a checksummed cmdline-tools download, and a verifyScrcpyServer task
wired into every assets merge. The expected server checksum can be
overridden with -PscrcpyServerSha256 when the jar is built from
source.

build-apk now requires apksigner and fails unless independent
signature verification succeeds. Split the test image into unit and
e2e targets so JVM-only test runs do not download an emulator. Ship
THIRD_PARTY_NOTICES and the LGPL text for SPAKE2 in the APK. Add
scripts/check as the host quality gate.

signingConfigs.release populates only when all four of KEYSTORE_PATH,
KEYSTORE_PASS, KEY_ALIAS and KEY_PASS are set, but the buildTypes
wiring keyed on KEYSTORE_PATH alone. A half-set environment selected
a half-populated config and failed with a confusing gradle error.
Gate both on the same condition.

Native Java app for Android 12+ that mirrors another Android
device over wireless ADB, forwarding video, audio, touch input,
and clipboard. Bundles a pinned scrcpy-server.jar and the
vendored libadb-android stack. Supports h264/h265/av1 video and
raw/opus audio with in-app codec selection. No NDK, no Kotlin.
Includes JVM unit tests and a Docker-based emulator e2e rig.