Fix release publish artifact download and per-job Gradle cache keys.

download-artifact accepts one glob pattern, not multiline lists; split platform and Android downloads. Scope Gradle build cache keys per job and use read-only setup-gradle on parallel jobs to avoid cache reservation races.

Co-authored-by: Cursor <cursoragent@cursor.com>

.github/actions/setup-java-gradle/action.yml

@@ -6,6 +6,10 @@ inputs:
     description: Optional JDK architecture (x64). Omit for host default.
     required: false
     default: ""
+  cache-read-only:
+    description: Restore Gradle User Home only; do not save (avoids parallel cache write races).
+    required: false
+    default: "false"
 
 runs:
   using: composite
@@ -19,6 +23,6 @@ runs:
     - uses: gradle/actions/setup-gradle@v5
       with:
         gradle-version: wrapper
-        cache-read-only: false
+        cache-read-only: ${{ inputs.cache-read-only == 'true' }}
         cache-overwrite-existing: true
         add-job-summary: on-failure