Main coves client

chore(release): harden credential ignores and reframe docs for a public repo master

Pre-push review of the fastlane work. No secret was ever committed, but two things were worth fixing before this goes out to the world. The .env and *.p8 ignore rules matched only the two exact paths in use. fastlane also loads .env.default and .env.<environment>, and RELEASING.md tells you to download a .p8 that is only ignored if it happens to land in ios/fastlane/. Add repo-root patterns covering the whole class, with .env.example kept visible. RELEASING.md also read as if everyone holds the signing keys, which is true for exactly one person. Say up front that it is maintainer-only and that a fork needs its own accounts and identity, so a contributor does not stall on step 1. Recommend the three narrow Play permissions ahead of Admin rather than after it -- a public doc gets copied. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>


+25 -4
3 changed files