- release.yml android job: build APK + AAB (bundleRelease/bundleDebug) - androidApp: versionCode overridable via -PappVersionCode (Play requires an incrementing versionCode per upload) - make_release_keystore.sh: PKCS12 has no separate key password (keytool ignores -keypass) — print the store password for ANDROID_KEY_PASSWORD