finish android task suite

android/app/build.gradle.kts

@@ -1,3 +1,6 @@
+import java.io.FileInputStream
+import java.util.Properties
+
 plugins {
     alias(libs.plugins.android.application)
     alias(libs.plugins.kotlin.compose)
@@ -31,6 +34,25 @@ android {
         // resourceConfigurations.addAll(listOf("en"))
     }
 
+    // Load signing configuration from key.properties
+    // This file is NOT committed — see key.properties.template
+    val keystorePropertiesFile = rootProject.file("key.properties")
+    val keystoreProperties = Properties()
+    if (keystorePropertiesFile.exists()) {
+        keystoreProperties.load(FileInputStream(keystorePropertiesFile))
+    }
+
+    signingConfigs {
+        create("release") {
+            if (keystoreProperties.isNotEmpty()) {
+                storeFile = file(keystoreProperties["storeFile"] as String)
+                storePassword = keystoreProperties["storePassword"] as String
+                keyAlias = keystoreProperties["keyAlias"] as String
+                keyPassword = keystoreProperties["keyPassword"] as String
+            }
+        }
+    }
+
     buildTypes {
         debug {
             isMinifyEnabled = false
@@ -49,8 +71,8 @@ android {
             buildConfigField("String", "API_BASE_URL", "\"https://api.kordant.com\"")
 
             // Signing config for release builds
-            // In production, use signingConfigs with keystore properties
-            // signingConfig = signingConfigs.getByName("release")
+            // Requires key.properties (see key.properties.template)
+            signingConfig = signingConfigs.getByName("release")
         }
     }
 
@@ -137,6 +159,7 @@ dependencies {
     implementation(libs.okhttp.logging.interceptor)
     implementation(libs.gson)
     implementation(libs.play.services.auth)
+    implementation(libs.play.integrity)
     implementation(libs.retrofit)
     implementation(libs.retrofit.kotlinx.serialization.converter)
     implementation(libs.kotlinx.serialization.json)