ADFA-2602: Address review on the asset-zip workflow

Three findings from @jatezzz on #1815:

- The content gate checked seven entries and skipped exactly the two whose
  filenames encode the Gradle version, so a constants.kt bump without the
  matching createAssetsZip/Asset() rename would publish an 8.14.3 payload to
  assets/9.6.1/ with a Slack line claiming 9.6.1 -- the mislabel this PR
  exists to prevent. Gate on the interpolated names as well.
- The ~/.ssh/id_rsa hazard the PR body describes spans runs, not just matrix
  legs: two overlapping dispatches let one run's Cleanup ssh fire during the
  other's scp. Added a top-level concurrency group with
  cancel-in-progress: false, since cancelling mid-scp would leave the key and
  partial staging on the shared runner.
- The artifact round-trip re-compressed an already-compressed payload and
  shipped each leg the other ABI's assets. Measured: the artifact was
  1,484,450,451 bytes against ~1,590 MB of input, so compression bought ~6.7%
  -- documentation.db does not compress either, because its content blobs are
  already brotli-encoded. Now compression-level: 0, and the staging splits
  into a common artifact plus one per ABI, so each leg no longer downloads the
  other ABI's ~431 MB.

Claude-Session: https://claude.ai/code/session_017HGpMsUzZ5wxCfMtDZ2HGP

Author: alome007

.github/workflows/generate_assets.yml

@@ -35,6 +35,10 @@ on:
         required: false
         default: adfa-2602-rc
 
+concurrency:
+  group: generate-assets
+  cancel-in-progress: false
+
 env:
   SCP_HOST: ${{ vars.GREENGEEKS_SSH_HOST }}
 
@@ -244,11 +248,37 @@ jobs:
             || { echo "ERROR: documentation.db predates the templateId column; docs requests will 500"; exit 1; }
           echo "All ingredients staged"
 
-      - name: Upload staged assets
+      - name: Upload staged assets (ABI-independent)
         uses: actions/upload-artifact@v4
         with:
-          name: debug-assets
-          path: assets/
+          name: debug-assets-common
+          path: |
+            assets/
+            !assets/android-sdk-*.zip
+            !assets/bootstrap-*.zip
+          compression-level: 0
+          retention-days: 1
+          if-no-files-found: error
+
+      - name: Upload staged assets (v8)
+        uses: actions/upload-artifact@v4
+        with:
+          name: debug-assets-v8
+          path: |
+            assets/android-sdk-arm64-v8a.zip
+            assets/bootstrap-arm64-v8a.zip
+          compression-level: 0
+          retention-days: 1
+          if-no-files-found: error
+
+      - name: Upload staged assets (v7)
+        uses: actions/upload-artifact@v4
+        with:
+          name: debug-assets-v7
+          path: |
+            assets/android-sdk-armeabi-v7a.zip
+            assets/bootstrap-armeabi-v7a.zip
+          compression-level: 0
           retention-days: 1
           if-no-files-found: error
 
@@ -317,10 +347,16 @@ jobs:
         run: |
           echo "$GOOGLE_SERVICES_JSON" > app/google-services.json
 
-      - name: Download staged assets
+      - name: Download staged assets (ABI-independent)
+        uses: actions/download-artifact@v4
+        with:
+          name: debug-assets-common
+          path: assets
+
+      - name: Download staged assets (this ABI)
         uses: actions/download-artifact@v4
         with:
-          name: debug-assets
+          name: debug-assets-${{ matrix.abi }}
           path: assets
 
       - name: Assemble assets zip
@@ -344,6 +380,8 @@ jobs:
 
       - name: Verify assets zip
         id: assets_zip
+        env:
+          GRADLE_VERSION: ${{ steps.toolchain.outputs.GRADLE_VERSION }}
         run: |
           zip_path="app/build/outputs/assets/assets-${{ matrix.arch }}.zip"
           if [ ! -s "$zip_path" ]; then
@@ -352,7 +390,8 @@ jobs:
           fi
           unzip -tq "$zip_path"
           for entry in android-sdk.zip bootstrap.zip localMvnRepository.zip documentation.db \
-                       core.cgt plugin-artifacts.zip plugin-maven-repo.zip; do
+                       core.cgt plugin-artifacts.zip plugin-maven-repo.zip \
+                       "gradle-$GRADLE_VERSION-bin.zip" "gradle-api-$GRADLE_VERSION.jar.zip"; do
             unzip -l "$zip_path" | grep -qE "[[:space:]]$entry$" \
               || { echo "ERROR: $zip_path is missing entry $entry"; exit 1; }
           done