ci: retry authentication with GCP (#9786)

At present, it appears that `actions/toolkit` has a bug where it isn't
always able to correctly fetch an ID token. See
actions/toolkit#2098 for the upstream issue.
As a result, our CI often fails relatively often. A simple restart
usually fixes the issue. This however is annoying because it means PRs
get de-queued from the merge-queue or don't queue in the first place and
therefore require baby-sitting.

To fix this, we attempt to build a retry-mechanism from within the
action. Using `continue-on-error`, we tell the "auth" step to continue,
even if it fails. Following that, we try to authenticate again but only
if the previous one failed. We do this up to 3 times before actually
giving up.

---------

Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com>

fix(seeds): remove unused vars (#9731)

This fixes some warnings introduced by #9692.

fix(android): fix view state lifecycle around tunnel/auth (#9621)

`onViewCreated()` is called when the view initializes, and then
`onResume()` is called right after, in addition to anytime the view is
shown again.

To prevent showing the VPN permission activity twice, we remove the
`checkTunnelState()` from onViewCreated, allowing only `onResume()` to
call it.

A boolean flag is added to track whether this is the "first" launch of
the app in order to determine whether to `connectOnStart`.

Fixes #9584

---------

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>

fix(ci): lock xcode major (#9585)

Apple won't allow apps built with Xcode betas to be reviewed.

<img width="1146" alt="Screenshot 2025-06-19 at 9 04 17 AM"
src="https://github.com/user-attachments/assets/11470f04-603b-4c5c-aad2-fba0e4eb391a"
/>

fix(portal): ensure sentry reports conditional migrations (#9582)

Sentry isn't started when this runs, so start it and manually capture a
message to ensure we're reminded about pending conditional migrations.

Verified that this works with the Release script.

fix(apple): disable false-positive "App hang" reports (#9568)

As recommended by the Sentry team [0], "App hang" tracking should be
disabled before calling into certain system APIs like showing alerts to
prevent false-positives.

[0]: getsentry/sentry-cocoa#3472

refactor(gui-client): introduce custom ReactRouterSidebarItem (#9508)

This cleans up some changes left over from #9505 by using a custom
component.

fix(ci): use fixed bash conditional (#9509)

This is preventing the relevant jobs from running, causing staging
deploys to fail.

chore(gui-client): rename log file of tunnel service (#9411)

This is a left-over from the rename of the background service for the
GUI client from IPC to Tunnel service.

fix(gui-client): allow legacy settings to parse new format (#9418)

As part of the introduction of General settings, we split up "Advanced
settings" and also renamed one of the fields. Upon first start, the
settings are migrated to the new format. What we failed to notice is
that one the next subsequent start, the legacy settings struct will fail
to parse the now migrated configuration and fall back to the default.
This then appears as if the settings are not getting saved.

Resolves: #9417

---------

Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com>