devbox run always executes relative to the devbox project root (where devbox.json lives), ignoring the shell's cwd at invocation.
Reads the release keystore from env vars in CI, falling back to the debug keys locally. Adds fastlane metadata for F-Droid/Obtainium and a .forgejo workflow that builds, signs, and publishes the APK on pushing a vX.Y.Z+N tag.