build.py: specify commit & (no) APK for easy building/testing

dashboard website

CLI tool (rbtlog-check)

client support?

sigsum?

use apksigner instead of shasum equality?

log hashes of .sh & .py?

map tag to commit(s)?

map commit to tag(s)?

stream build log to stderr?