Changes: * Drop --keep from nix/scripts/build.sh as it does nothing * Allow scripts/release-android.sh take passwords from env * Use env file in extra-sandbox-paths to pass keystore passwords * Quote ever segment of Nix options to avoid parsing errors Signed-off-by: Jakub Sokołowski <jakub@status.im>