Replay fuori da Puma, fix ops cron e firma release Android.

Dopo auth Rails redirect a URL presigned su /media/ (edge → Garage); aumenta
RAILS_MAX_THREADS, corregge ingest log ops via stdin e keystore Play Console.

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/backup_android_keystore.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# Backup locale del keystore Android (Play Console upload key).
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+ANDROID="${ROOT}/native/android"
+KEYSTORE_DIR="${ANDROID}/keystore"
+PROPS="${ANDROID}/keystore.properties"
+DEST="${ANDROID_KEYSTORE_BACKUP_DIR:-${HOME}/.matchlivetv/android-keystore-backup}"
+STAMP="$(date +%Y%m%d-%H%M%S)"
+
+if [ ! -f "${PROPS}" ] || [ ! -d "${KEYSTORE_DIR}" ]; then
+  echo "ERRORE: keystore non trovato in ${ANDROID}"
+  echo "Genera prima il keystore di release (vedi native/android/)."
+  exit 1
+fi
+
+mkdir -p "${DEST}/${STAMP}"
+cp -a "${PROPS}" "${DEST}/${STAMP}/"
+cp -a "${KEYSTORE_DIR}/." "${DEST}/${STAMP}/keystore/"
+chmod -R u=rwX,go= "${DEST}/${STAMP}"
+
+echo "Backup keystore Android: ${DEST}/${STAMP}"
+echo "Conserva anche una copia off-site (password manager / cloud cifrato)."