mobile: name native OTA releases by version, not the Expo update_id

Record an ota_version (display version + commit hash, e.g. v1.2.18355.fc38c23d)
in the native OTA manifest so the published bundle is identified the same
descriptive way as everything else, instead of the opaque Expo update_id UUID.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: aapeliv

app/.gitlab-ci.yml

@@ -1063,11 +1063,12 @@ deploy:mobile-ota-staging:
 # job, so a JS-only over-the-air update ships without a backend/web deploy.
 #
 # CI only stages UNSIGNED bundles. Signing and the push to the prod CDN happen
-# later, in the tools/ publish_native_ota lambda — the private signing key never
-# touches CI. The manifest's asset URLs are baked with the literal placeholder
-# __OTA_BUNDLE_BASE__; the publish lambda substitutes the real prod CDN base
-# (<cdn-root>/<update-id>) before signing, so it alone owns where the bundle
-# lives and the URLs can't drift from the upload path.
+# later, in the tools/ deploy lambda's publish_native_ota action — the private
+# signing key never touches CI. The manifest's asset URLs are baked with the
+# literal placeholder __OTA_BUNDLE_BASE__; the publish step substitutes the real
+# prod CDN base (<cdn-root>/<ota-version>, e.g. v1.2.18355.fc38c23d) before
+# signing, so it alone owns where the bundle lives and the URLs can't drift from
+# the upload path.
 build:mobile-ota-prod:
   needs: ["protos"]
   stage: build

app/deployment/build_native_ota_manifest.sh

@@ -32,13 +32,20 @@ mkdir -p "$(dirname "$OUTPUT_PATH")"
 
 BASE="https://${CI_COMMIT_SHORT_SHA}--native-ota.${PREVIEW_DOMAIN}"
 
+# Descriptive, immutable release name the publish step uses as the CDN path
+# segment, e.g. v1.2.18355.fc38c23d — the release display version (app/version
+# + commit number) plus the short commit hash. Built from clean components so it
+# keeps this form regardless of which branch the bundle was built on.
+OTA_VERSION="$(cat app/version).${COMMIT_NUMBER}.${CI_COMMIT_SHORT_SHA}"
+
 cat > "$OUTPUT_PATH" <<EOF
 {
   "commit_sha": "${CI_COMMIT_SHA}",
   "commit_short_sha": "${CI_COMMIT_SHORT_SHA}",
   "commit_number": ${COMMIT_NUMBER},
   "slug": "${SLUG}",
   "display_version": "${DISPLAY_VERSION}",
+  "ota_version": "${OTA_VERSION}",
   "branch": "${CI_COMMIT_REF_NAME}",
   "timestamp": "${CI_COMMIT_TIMESTAMP}",
   "pipeline_id": "${CI_PIPELINE_ID}",