Improve android signing script

In #40513 (closed) we added the script used for signing APKs.

I think we can make the following improvements:

downloading Android SDK build-tools if missing
checking that needed packages are installed
downloading *.apk files from pkgstage machine before signing them, and re-uploading them to pkgstage signing after
using tbb_version from set-config.tbb-version

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information