Stash jarsigner progress

Perhaps about to take this off the map, and need a restore point.
Add the 'apk' product back

Grab it in jarsigner. Need to figure out a decent way
to filter the target.graph for particular keystore.build_type
Jarsigner has the product it needs

Still need to filter the keystore.build_type from the context
We have the unisgned apk, the target and the key.

That is all the ingredients the recipe calls for :)
Move Android key definitions into 3rdparty

This framework adds a dir for release BUILD files and keys. Even
though release builds are not supported, I believe we are better
providing a safe framework than letting users fend for themselves.

Without explicitely showing a safe place for the releasekeys,
we are risking someone trying to figure it out on their own
and accidentally exposing a production key in a vcs.

So, this is not perfect, but much better than nothing.
Jarsigner progess. Nailgun method and render_args shaping up
Jarsigner execute() almost complete

Needs some error-catching, but basically functional.
Update the debug.keystore with the current standard 10000 validity
Render_args almost workingfor jarsigner.

CLose, close. We will have a signed apk tomorrow morning, I believe.
Jarsigner args rendered

Jarsigner tool being called incorrectly as of now.
Successful signed apk from pants

Woot, etc...
Change 'key_alias_passwrod' into 'key_password'

It may be 'slightly' less descriptive, but much less confusing.
Even the jarsigner tool uses 'keypass' for this value.
Update docstrings and error catching for jarsigner
Git stash jarsigner work
Update BUILD files and jarsigner exceptions
Finish cleaning for CR
Move part of jarsigner execute into inner function
Send signed.apk to dist
Fix small CI errors

CI now passes
Add jarsigner integration test

Should all pass CI and then going up for a quick review