[ADDED] Additional notes on debug keystore usage.

app/build.gradle.kts

@@ -47,6 +47,8 @@ android {
             //    It allows early testers to test drive the app without us worrying about signing
             //    https://developer.android.com/studio/publish/app-signing
             storeFile = file("${rootProject.projectDir}/keystore/debug.keystore")
+
+            // ℹ️ When time comes, these values should come from `secret.properties` file or CI/CD secrets.
             storePassword = "android"
             keyAlias = "androiddebugkey"
             keyPassword = "android"

keystore/README.md

@@ -4,6 +4,10 @@ The debug keystore file is added to the repository to make it easier for develop
 the app without having to generate a new keystore file each time. The debug keystore is used for
 signing the app during development and CI builds, and it is **not intended for production use**.
 
+> [!NOTE]  
+> The debug keystore is generated automatically by Android Studio
+> and copied from the `$HOME/.android/debug.keystore` location.
+
 ## Related Resources
 - https://developer.android.com/studio/publish/app-signing
 - https://source.android.com/docs/security/features/apksigning