Ship LITE and PRO, and let CLARITY and LIGHT GLOW reach the library

Both flavors build from one JS tree: `lite` hands out the free apk
(com.locphamtran.recipescamera), `pro` sells as-is (same id + .pro, label
"RecipesCam Pro"). Release is signed from android/keystore.properties, both
files gitignored - lose either and no later build can install over this one.
The tier reaches JS through src/provariant.ts, which tools/set-variant.mjs
rewrites before each build (`npm run apk:lite` / `apk:pro`); the gradle flavor
alone would ship a Pro apk that thinks it is Lite.

The dev scaffolding goes: the three src/dev probes and their App effects, the
EXPO_PUBLIC_CAPTURE_MODE [CAPTURE] timing log, and the -PdevtestSuffix
side-by-side install hook. 'balanced' stays the shipped capture mode, which is
what those probes measured on the 12S Ultra.

Looking at the picture: WB now converts kelvin through the Planckian locus into
a luma-normalised gain (unity at 5500K, symmetric tint) instead of the old
one-sided push; LEITZ STREETLIFE splits into CLASSIC and VIVID; selecting a
recipe loads every knob it carries over the defaults and stays editable, and
RESET hands the panel back to the sim's own values. The in-app library picker,
the ultra-wide native module and recipe share/import land here too.

CLARITY and LIGHT GLOW existed only on the camera worklet and the export
engine, so a photo opened from the library ignored both. They now run in all
three library preview branches (libPhoto), and the preview clips them to the
drawn image - the export engine always clipped its bloom to the canvas, the
preview drew it over the whole rect, so the bloom bled past the photo onto the
black letterbox and over the frame's mat.

android/app/build.gradle

@@ -102,6 +102,19 @@ android {
         }
     }
     signingConfigs {
+        release {
+            // Credentials live in android/keystore.properties (gitignored), next to
+            // app/release.keystore. Lose either and no future build can install over
+            // this one - back both up somewhere safe.
+            def props = new Properties()
+            def propsFile = rootProject.file('keystore.properties')
+            if (!propsFile.exists()) throw new GradleException('android/keystore.properties missing')
+            propsFile.withInputStream { props.load(it) }
+            storeFile file('release.keystore')
+            storePassword props.getProperty('storePassword')
+            keyAlias props.getProperty('keyAlias')
+            keyPassword props.getProperty('keyPassword')
+        }
         debug {
             storeFile file('debug.keystore')
             storePassword 'android'
@@ -109,6 +122,21 @@ android {
             keyPassword 'android'
         }
     }
+    // Two products, two sales channels: lite = free apk handed out for feedback,
+    // pro = paid apk. Same JS; the tier reaches JS via src/provariant.ts, which
+    // tools/set-variant.mjs rewrites before each build.
+    flavorDimensions "tier"
+    productFlavors {
+        lite {
+            dimension "tier"
+        }
+        pro {
+            dimension "tier"
+            applicationIdSuffix ".pro"
+            versionNameSuffix "-pro"
+            resValue "string", "app_name", "RecipesCam Pro"
+        }
+    }
     buildTypes {
         debug {
             signingConfig signingConfigs.debug
@@ -116,7 +144,7 @@ android {
         release {
             // Caution! In production, you need to generate your own keystore file.
             // see https://reactnative.dev/docs/signed-apk-android.
-            signingConfig signingConfigs.debug
+            signingConfig signingConfigs.release
             def enableShrinkResources = findProperty('android.enableShrinkResourcesInReleaseBuilds') ?: 'false'
             shrinkResources enableShrinkResources.toBoolean()
             minifyEnabled enableMinifyInReleaseBuilds