Peach Android v2.17.36

Security fixes

• Release signing passwords are now injected from ~/.secrets through environment variables; the established keystore and signing certificate are unchanged.
• Vault restore keeps real and decoy slot records equal-length.
• Vault destruction reports failed preference commits or Codex-cache deletions instead of claiming success.
• Malformed Codex compression and no-progress streams fail closed.
• Gradle dependency verification now checks publisher signatures alongside existing hashes.
• Forged update-open intents are ignored without the app-issued one-time token.
• Marker-only Sync continuation chunks are rejected.
• Release tool selection remains pinned but accepts explicit Java and NDK paths with fail-closed checks.

Verification

• Focused Codex, vault alignment, destruction, and release-signing checks passed.
• Full Android unit tests, lint, release assembly, native provenance, manifest, and Kepr helper gates are run before save.