Problem
`android/app/build.gradle`:
```groovy
buildTypes { release { signingConfig signingConfigs.debug } }
```
Release-mode APKs/AABs are signed with the debug keystore, so they cannot be uploaded to the Play Store and are insecure. Direct release-readiness blocker.
Scope (low-code)
Add a `signingConfigs.release` block reading from an untracked `key.properties`, and point release at it. Small gradle edit plus a documented `key.properties` template.
Acceptance criteria
- Release `signingConfig` no longer references `signingConfigs.debug`.
- Keystore credentials read from an untracked `key.properties` (added to `.gitignore`), with a documented example.
- `flutter build appbundle --release` produces a non-debug-signed artifact.
Problem
`android/app/build.gradle`:
```groovy
buildTypes { release { signingConfig signingConfigs.debug } }
```
Release-mode APKs/AABs are signed with the debug keystore, so they cannot be uploaded to the Play Store and are insecure. Direct release-readiness blocker.
Scope (low-code)
Add a `signingConfigs.release` block reading from an untracked `key.properties`, and point release at it. Small gradle edit plus a documented `key.properties` template.
Acceptance criteria