chore(flatpak): rotate GPG signing key to Bearwave App

Replace the legacy Flatpak repo key with Bearwave App
<dev@bearwave.app> (5BAA384577671E45) in bearwave.flatpakref,
build-flatpak.sh, and deploy-flatpak.sh.

scripts/build-flatpak.sh

@@ -4,7 +4,7 @@ set -euo pipefail
 root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 cd "$root"
 
-gpg_key_id="${BEARWAVE_FLATPAK_GPG_KEY:-AA1D2F0170800855}"
+gpg_key_id="${BEARWAVE_FLATPAK_GPG_KEY:-5BAA384577671E45}"
 mode="build"
 deploy=false
 

scripts/deploy-flatpak.sh

@@ -23,5 +23,15 @@ rsync -avz \
   flatpak_repo/ \
   "${deploy_target}"
 
-echo "Deployed flatpak_repo/ to ${deploy_target}"
-echo "bearwave.flatpakrepo on the server is left unchanged."
+for ref_file in bearwave.flatpakref flatpak_repo/bearwave.flatpakref flatpak_repo/bearwave.flatpakrepo; do
+  if [[ -f "${ref_file}" ]]; then
+    rsync -avz \
+      -e 'ssh -o RemoteCommand=none -o RequestTTY=no' \
+      --no-group --no-owner \
+      "${ref_file}" \
+      "${deploy_target}$(basename "${ref_file}")"
+    echo "Deployed ${ref_file} to ${deploy_target}"
+  fi
+done
+
+echo "Deployed flatpak_repo/ to ${deploy_target}"