- release signing reads keystore/keystore.properties (git-ignored) - zapstore.yaml publishes the app via local APK source