Shell script to rebuild a Java webapp
Immediate security problem

Do you know which ng, cp, rm, gradlew does the script execute? You shouldn't rely on PATH.
Indirect security problem

rm and cp can fail midway, and you may end up deploying something unintended. Along the same lines, can ng produce something half-baked? Consider testing exit codes and act accordingly.
Every time you want to comment the behavior, consider factoring it into a well-named function, e.g.

recreate_static_directory() {
    cd "$1"
    echo "Deletic static web resources"
    rm -r static

    echo "Creating static directory"
    mkdir static

    echo "Copying static resources into directory"
    cp -r "$webapp/dist/."  "$1/static"
    cp "$serverapp/secured/emmanuel-arzate/private-key.p12" "$1"

I am not sure I follow the mix of cds and fully-qualified paths.