ci(olcrtc): make sidecar cache key mode-aware and note repo pin

switch the oss sidecars status from cat|sha1sum to git ls-files -s so a
mode-only change invalidates the cache, matching the depot workflow.
document that OLCRTC_REPO/OLCRTC_COMMIT must pin a commit carrying the
protected pion net or the media path is no longer kept off the tun.

Author: hawkff

.github/workflows/ci.yml

@@ -125,7 +125,18 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5
       - name: Sidecars Status
-        run: cat buildScript/lib/mieru.sh buildScript/lib/hysteria2.sh buildScript/lib/masterdnsvpn.sh buildScript/lib/naive.sh buildScript/lib/olcrtc.sh buildScript/lib/olcrtc-src/main.go buildScript/lib/olcrtc-src/go.mod buildScript/init/env.sh buildScript/init/env_ndk.sh | sha1sum > sidecars_status
+        run: |
+          git ls-files -s -- \
+            buildScript/lib/mieru.sh \
+            buildScript/lib/hysteria2.sh \
+            buildScript/lib/masterdnsvpn.sh \
+            buildScript/lib/naive.sh \
+            buildScript/lib/olcrtc.sh \
+            buildScript/lib/olcrtc-src/main.go \
+            buildScript/lib/olcrtc-src/go.mod \
+            buildScript/init/env.sh \
+            buildScript/init/env_ndk.sh \
+            | sha1sum > sidecars_status
       - name: Sidecars Cache
         id: cache
         uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5

buildScript/lib/olcrtc.sh

@@ -19,6 +19,12 @@
 # Android protected-net hook) and point the wrapper module at it via a replace
 # directive so the build is fully reproducible and offline-stable.
 #
+# OLCRTC_REPO/OLCRTC_COMMIT default to the fork commit that carries the protected
+# pion net (internal/protect/pionnet.go + the jitsi SetNet hook). Overriding them to
+# an upstream commit that predates that change builds and runs, but the media path is
+# no longer kept off the tun: pin a commit that includes the hook until it lands in
+# openlibrecommunity/olcrtc.
+#
 # Usage: ./run lib olcrtc
 set -e
 set -o pipefail