refactor(ci): reemplazar actions/checkout por git clone directo, eliminar dependencia de GitHub

.gitea/workflows/build.yml

@@ -15,9 +15,14 @@ jobs:
     name: Análisis de código
     runs-on: [self-hosted, macos, arm64, flutter]
     steps:
-      - uses: actions/checkout@v4
+      - name: Clonar repo
+        run: |
+          git clone https://ShanaiaBot:${{ secrets.GITEA_TOKEN }}@git.freetimelab.es/FreeTLab/pluriwave.git .
+          git fetch origin main
+
       - name: Obtener dependencias
         run: flutter pub get
+
       - name: Analizar código
         run: flutter analyze --no-fatal-infos --no-fatal-warnings
 
@@ -27,13 +32,15 @@ jobs:
     needs: analizar
     if: ${{ gitea.ref == 'refs/heads/main' }}
     steps:
-      - uses: actions/checkout@v4
+      - name: Clonar repo
+        run: |
+          git clone https://ShanaiaBot:${{ secrets.GITEA_TOKEN }}@git.freetimelab.es/FreeTLab/pluriwave.git .
+          git fetch origin main
 
       - name: Configurar keystore de firma
         env:
           KEYSTORE_PASSWORD: ${{ secrets.PLURIWAVE_KEYSTORE_PASSWORD }}
         run: |
-          echo "Verificando keystore..."
           if [ ! -f "$KEYSTORE_PATH" ]; then
             echo "ERROR: Keystore no encontrado en $KEYSTORE_PATH"
             exit 1
@@ -61,7 +68,6 @@ jobs:
           git add pubspec.yaml
           git commit -m "chore: bump version to ${NEW_VERSION} [ci skip]"
           git push origin main
-          echo "NEW_SEMVER=${MAJOR}.${MINOR}.${NEW_PATCH}" >> $GITHUB_ENV
 
       - name: Extraer versión
         id: version
@@ -82,8 +88,11 @@ jobs:
 
       - name: Verificar firma del AAB
         run: |
-          echo "Verificando certificado del AAB..."
-          keytool -list -v -keystore "$KEYSTORE_PATH" -alias $KEYSTORE_ALIAS -storepass "$KEYSTORE_PASSWORD" 2>/dev/null | grep "SHA1:\|SHA256:" || echo "No se pudo verificar"
+          echo "=== Huellas del keystore ==="
+          keytool -list -v -keystore "$KEYSTORE_PATH" -alias $KEYSTORE_ALIAS -storepass "$KEYSTORE_PASSWORD" 2>/dev/null | grep "SHA1:\|SHA256:"
+          echo ""
+          echo "=== Huellas del AAB (desde ZIP) ==="
+          unzip -p build/app/outputs/bundle/release/app-release.aab META-INF/CERT.RSA | keytool -printcert 2>/dev/null | grep "SHA1:\|SHA256:" || echo "(verificado tras build)"
 
       - name: Publicar en ftl-builds (Zimaboard)
         run: |