use apksigner defaults to sign index-v2.jar

The following discussions from !1092 (merged) should be addressed:

  • @eighthave started a discussion: (+15 comments)

    The new signing method should use the default Java settings, since Java and Android both maintain those. That helps avoid a repeat of being stuck on an old signing algorthim. That means specifically that this call to jarsigner does not specify any of the algorithms, e.g. jarsigner -keystore config['keystore'] -storepass:env FDROID_KEY_STORE_PASS index-v2.jar alias

  • @eighthave started a discussion: (+3 comments)

    How about we make this looking towards the future by default, with a flag to enable the old sig?

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information