Pin gradle wrapper SHA-256 for verified f-droid builds.