Sync from private repo -- 2026-03-05

[Termopus-Admin]

Automated Sync

Passed all 21 validation checks:

• 1. Gitleaks secret scanner -- no secrets
• 2. No private keys in any file
• 3. No local paths (/Users/naorbrig)
• 4. No real KV namespace IDs
• 5. No Apple Team ID
• 6. No dev URLs (relay-dev, api-dev, workers.dev)
• 7. Native HMAC keys + endpoints zeroed
• 8. Sensitive files removed (plans, internal scripts, certs, artifacts)
• 9. No .env / .dev.vars / key.properties
• 10. No hardcoded credentials (passwords, PATs, API keys)
• 11. No internal emails
• 12. No real signing hashes
• 13. No private repo references (naorbrig/termopus)
• 14. No Paddle references
• 15. No subscription screens
• 16. No cert pin values
• 17. No domain locks
• 18. No signing keys
• 19. No real Firebase configs (placeholder allowed)
• 20. No Play Integrity dependency
• 21. No production URLs

Review the diff before merging.

---

Automated by sync-public.yml