use environment variable instead of hardcoding the credential
sync file upload change, retrieve size from both OSS and load upload control
add app package store at backend
add last package query in app package management