fix(ci): skip server deps on build and source Android signing env

- Use workspace-scoped npm ci to avoid compiling better-sqlite3 on Windows
  (Node 24 has no prebuilt binaries and node-gyp fails in CI)
- Source setup-android-signing.sh so WEB2APP_ANDROID_* vars reach sign script

Co-authored-by: ShuMengya <shumengya666@outlook.com>

.github/workflows/build-app.yml

@@ -42,7 +42,7 @@ jobs:
           cache: npm
 
       - name: Install dependencies
-        run: npm ci
+        run: npm ci --workspace=template --include-workspace-root
 
       - name: Prepare template
         run: node .github/scripts/prepare-template.mjs
@@ -88,7 +88,7 @@ jobs:
           cache: npm
 
       - name: Install dependencies
-        run: npm ci
+        run: npm ci --workspace=template --include-workspace-root
 
       - name: Prepare template
         run: node .github/scripts/prepare-template.mjs
@@ -125,7 +125,7 @@ jobs:
 
       - name: Sign Android APK
         run: |
-          bash .github/scripts/setup-android-signing.sh
+          source .github/scripts/setup-android-signing.sh
           bash .github/scripts/sign-android-apk.sh
         env:
           ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}