amir
|
093ddb7fce
|
security: move signing key out of source (rotated), add local replay guard
- Remove committed release keystore + hardcoded signing password
- Load signing config from gitignored app/keystore.properties
- Add single-use token guard (fail-open) to block on-device approval replay
|
2026-07-10 09:31:13 +00:00 |
|