Draft: New app: Covpass

• The app complies with the inclusion criteria
• The original app author has been notified (and does not oppose the inclusion). See https://github.com/Digitaler-Impfnachweis/covpass-android/issues/2#issuecomment-862407472
• All related fdroiddata and RFP issues have been referenced in this merge request
• The upstream app source code repo contains the app metadata (summary/description/images/changelog/etc) in a Fastlane or Triple-T folder structure (Unfortunately not, I opened an issue on the upstream tracker: https://github.com/Digitaler-Impfnachweis/covpass-android/issues/30)
• Builds with fdroid build
• Releases are tagged

I went manually through all dependencies and most are Apache 2.0 licensed. The remaining are:

• com.squareup.okhttp3 has Creative Commons Zero (CC0) License
• com.augustcellars.cose:cose-java has BSD-3-Clause License
• org.robolectric:robolectric has MIT License
• junit:junit has EPL License
• org.bouncycastle packages all have BouncyCastle License

I checked for apps on F-Droid which use these licenses to make sure they are compatible and found examples for all types of licenses.

I used scanignore only to skip gradle/common/publish.gradle which is causing an error with the line url config.url when they add a repo to upload their submodules. This whole publishing is deactivated by setting shouldPublish = false via prebuild.

---

Closes rfp#1769 (closed)