Release builds were signed with the debug keystore. On the GitHub runner
that keystore is generated fresh on every build, so each CI APK carried a
different signature and Android refused to install it over an existing
version ("App not installed").
- build.gradle.kts: read android/key.properties when present and use it
as the release signing config; fall back to debug otherwise so local
`flutter run --release` keeps working.
- build-apk.yml: decode the keystore from ANDROID_KEYSTORE_* secrets into
android/key.properties before building, and fail early if any secret
is missing instead of silently signing with a throwaway key.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01N3E5JovvDaQQ19D4UR258o
MichaelandClaude Fable 5
Michael