feat: embed rustls platform verifier

Merged
SE
5d ago
+179-1

Summary by cubic

Embeds the rustls platform verifier Android artifact directly into the library so consumers no longer need the GitHub-only Maven repository.

  • Unpacks the upstream AAR during build, merging its manifest and resources into our own and packaging its classes locally.
  • Adds a CI script that verifies the published POM/module metadata contains no org.rustls dependency and that every embedded class, resource, manifest entry, license, and keep rule matches the resolved upstream artifact.
  • Adds the upstream MIT license file to the packaged AAR.
  • Build-time resolution of the upstream artifact still requires the raw GitHub Maven repo, which is now documented as build-time only in settings.gradle.kts.

Summary by CodeRabbit

  • Build and Packaging
    • The Android library now includes the Rustls platform verifier and its license in the published package, without requiring consumers to fetch a separate Rustls dependency.
    • Publication checks now verify that the package contains the expected verifier classes, resources, manifest settings, and licensing information.