Accept Gradle properties for Sonatype + signing credentials (#4)

* Accept Gradle properties for Sonatype + signing credentials

Why: the HubSpotEngineering/oss-release Gradle release flow exports
credentials as ORG_GRADLE_PROJECT_mavenCentralUsername/Password and
ORG_GRADLE_PROJECT_signingInMemoryKey{,Id,Password}. The current
publish/signing config only reads SONATYPE_* / GPG_SIGNING_* env vars,
so the shared release job can't authenticate to Sonatype or sign jars.

Reading via findProperty(...) with the existing env vars as a fallback
keeps the standalone publish-sonatype.yml workflow working unchanged
while letting oss-release drive a release without a wrapper.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* Update Sonatype Nexus URLs in build.gradle.kts

* Upgrade Nexus publish plugin to version 2.0.0

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: atanasiuk-hubspot

build.gradle.kts

@@ -1,5 +1,5 @@
 plugins {
-    id("io.github.gradle-nexus.publish-plugin") version "1.1.0"
+    id("io.github.gradle-nexus.publish-plugin") version "2.0.0"
     id("org.jetbrains.dokka") version "2.0.0"
 }
 
@@ -39,11 +39,17 @@ tasks.named("dokkaJavadocCollector").configure {
 nexusPublishing {
     repositories {
         sonatype {
-            nexusUrl.set(uri("https://s01.oss.sonatype.org/service/local/"))
-            snapshotRepositoryUrl.set(uri("https://s01.oss.sonatype.org/content/repositories/snapshots/"))
+            nexusUrl.set(uri("https://ossrh-staging-api.central.sonatype.com/service/local/"))
+            snapshotRepositoryUrl.set(uri("https://central.sonatype.com/repository/maven-snapshots/"))
 
-            username.set(System.getenv("SONATYPE_USERNAME"))
-            password.set(System.getenv("SONATYPE_PASSWORD"))
+            username.set(
+                (findProperty("mavenCentralUsername") as String?)
+                    ?: System.getenv("SONATYPE_USERNAME"),
+            )
+            password.set(
+                (findProperty("mavenCentralPassword") as String?)
+                    ?: System.getenv("SONATYPE_PASSWORD"),
+            )
         }
     }
 }

buildSrc/src/main/kotlin/hubspot.publish.gradle.kts

@@ -50,9 +50,12 @@ configure<PublishingExtension> {
 }
 
 signing {
-    val signingKeyId = System.getenv("GPG_SIGNING_KEY_ID")?.ifBlank { null }
-    val signingKey = System.getenv("GPG_SIGNING_KEY")?.ifBlank { null }
-    val signingPassword = System.getenv("GPG_SIGNING_PASSWORD")?.ifBlank { null }
+    val signingKeyId = (findProperty("signingInMemoryKeyId") as String?)?.ifBlank { null }
+        ?: System.getenv("GPG_SIGNING_KEY_ID")?.ifBlank { null }
+    val signingKey = (findProperty("signingInMemoryKey") as String?)?.ifBlank { null }
+        ?: System.getenv("GPG_SIGNING_KEY")?.ifBlank { null }
+    val signingPassword = (findProperty("signingInMemoryKeyPassword") as String?)?.ifBlank { null }
+        ?: System.getenv("GPG_SIGNING_PASSWORD")?.ifBlank { null }
     if (signingKey != null && signingPassword != null) {
         useInMemoryPgpKeys(
             signingKeyId,