Replay fuori da Puma, fix ops cron e firma release Android.

Dopo auth Rails redirect a URL presigned su /media/ (edge → Garage); aumenta
RAILS_MAX_THREADS, corregge ingest log ops via stdin e keystore Play Console.

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/config/initializers/match_live_tv.rb

@@ -141,6 +141,16 @@ module MatchLiveTv
       ENV.fetch("REPLAY_DOWNLOAD_URL_TTL_SECONDS", "900").to_i
     end
 
+    def replay_media_public_base_url
+      ENV.fetch("REPLAY_MEDIA_PUBLIC_BASE_URL") { "#{app_public_url.chomp('/')}/media" }
+    end
+
+    def replay_media_redirect_enabled?
+      return false if replay_storage_local?
+
+      ENV.fetch("REPLAY_MEDIA_REDIRECT", "true") == "true"
+    end
+
     def google_analytics_measurement_id
       ENV["GOOGLE_ANALYTICS_MEASUREMENT_ID"].presence
     end