Can't use SHA1 for an app that has different package-name

Question

Background

I work on 2 different apps with common shared code, both used on the same project, but with different package names.

The problem

The apps