[AI] Include the "X-Android-Package" and "X-Android-Cert" headers

[rlazo]

These headers are necessary to support API Key restrictions. This feature enable you to limit which apps (by matching package name and certificate fingerprint) are allowed to make request.

Important: We still strongly recommend the use of Firebase App Check instead of, or in addition to, API key restrictions.

[gemini-code-assist]

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

[rlazo]

/gemini review

[github-actions]

📝 PRs merging into main branch

Our main branch should always be in a releasable state. If you are working on a larger change, or if you don't want this change to see the light of the day just yet, consider using a feature branch first, and only merge into the main branch when the code complete and ready to be released.

[gemini-code-assist]

Code Review

This pull request introduces the functionality to include X-Android-Package and X-Android-Cert headers in API requests. This is crucial for supporting API Key restrictions based on Android package name and certificate fingerprint, enhancing the security of API access. The implementation correctly handles different Android API levels for retrieving signing certificates and includes necessary test setup for Android context.

One minor improvement could be to remove a redundant import. Additionally, the use of an experimental API for hexadecimal formatting is noted, which might warrant consideration for stability in a production library.