CI: resolve app deps before generate_new_secrets (Android + Linux)

tool/generate_new_secrets.dart imports app packages (encrypt/convert/intl).
pubspec_gen.sh runs `flutter pub get` without set -e, so a silent hiccup there
surfaced downstream as 'Couldn't resolve the package encrypt' at secrets-gen.
Run `flutter pub get` explicitly (set -e) right before the tool on Android +
Linux, matching what the iOS flow effectively guarantees. The build container
already pins Flutter 3.32.0, so this resolves cleanly.

.github/workflows/build-android.yml

@@ -164,7 +164,15 @@ jobs:
 
       # ---- Secrets ---------------------------------------------------------
       - name: Generate per-module secrets.g.dart files (all empty defaults)
-        run: dart run tool/generate_new_secrets.dart
+        run: |
+          # tool/generate_new_secrets.dart imports app deps (encrypt/convert/intl),
+          # so the app's packages must be resolved first. The configure step runs
+          # `flutter pub get` inside pubspec_gen.sh WITHOUT `set -e`, so any hiccup
+          # there fails silently and surfaces here as "Couldn't resolve the package".
+          # Resolve explicitly (and loudly) before running the tool.
+          set -e
+          flutter pub get
+          dart run tool/generate_new_secrets.dart
 
       - name: Inject Trocador + WalletConnect + MoonPay secrets into lib/.secrets.g.dart
         env:

.github/workflows/build-linux.yml

@@ -124,7 +124,15 @@ jobs:
       # model_generator.sh is already trimmed to our 8 enabled chains.
       # Use `async` flag for parallel build_runner across modules.
       - name: Generate per-module secrets.g.dart files (all empty defaults)
-        run: dart run tool/generate_new_secrets.dart
+        run: |
+          # tool/generate_new_secrets.dart imports app deps (encrypt/convert/intl),
+          # so the app's packages must be resolved first. pubspec_gen.sh runs
+          # `flutter pub get` WITHOUT `set -e`, so any hiccup fails silently and
+          # surfaces here as "Couldn't resolve the package". Resolve explicitly
+          # (and loudly) before running the tool.
+          set -e
+          flutter pub get
+          dart run tool/generate_new_secrets.dart
 
       - name: Inject Trocador affiliate secrets into lib/.secrets.g.dart
         env: