chore: stop committing the release APK

.gitignore

@@ -12,10 +12,10 @@ build/
 output-metadata.json
 baselineProfiles/
 
-# ...except the deliberately committed release APKs under apk/, which exist so
-# people can install the app without a build environment. This negation must come
-# after `*.apk` above, because in .gitignore the last matching rule wins.
-!apk/**/*.apk
+# There is deliberately no exception re-including an APK. Release binaries are
+# attached to a GitHub Release by the Release workflow, never committed: a binary
+# in the repository is served through the raw file path, which a phone browser
+# refuses or saves under the wrong name, and it bloats every clone for no gain.
 
 # ---- Local machine configuration ---------------------------------------------
 local.properties

README.md

@@ -54,8 +54,17 @@ Every release contains:
 - **`discount-hunter-<version>.apk`** — the optimised release build
 - **Source code (zip)** and **(tar.gz)** — generated by GitHub from the tagged commit
 
-The APK is unsigned, so Android asks you to allow installation from your file manager the first
-time. See [`apk/README.md`](apk/README.md) for the step-by-step.
+The APK is **unsigned**, so Android will not install it until you allow your file manager to. The
+first time:
+
+1. Tap the downloaded `.apk`.
+2. Android says it is from an unknown source → **Settings** → allow your file manager to install apps.
+3. Go back and tap the APK again.
+
+To withdraw that permission afterwards: **Settings → Apps → (your file manager) → Permissions →
+Install unknown apps → Deny**.
+
+Requires **Android 7.0 (API 24)** or newer. Portrait orientation only.
 
 ### Build it yourself
 

SECURITY.md

@@ -12,7 +12,9 @@ you find a real problem, there is a safe way to report it.
 | 1.0.x (current release) | ✅ |
 | Anything older | ❌ |
 
-You are running the latest build from [`apk/`](apk/). Security fixes land there.
+You are running the latest build from the
+[Releases page](https://github.com/JuggyBob/DiscountHunterAndroid/releases/latest). Security fixes
+land in the next release.
 
 ## What the app does and does not do