v0.9.0-signed — production signing (one-time reinstall + restore)

The signing migration — one manual reinstall, then seamless forever.

Peers is now signed with our own production key (CN=Peers) instead of the throwaway Android debug key. That's a real security fix — nobody can forge a build as "Peers" — but Android won't auto-update across a signing-key change, so this release needs a one-time uninstall + reinstall. The identity backup shipped in v0.8.9 is what carries you across it.

Do it in this order

1. Back up first (if you didn't on v0.8.9): About → Back up identity + chats → passphrase → save the file off your phone.
2. Uninstall Peers.
3. Install v0.9.0 from F-Droid (refresh the repo).
4. Restore: About → Restore from backup → passphrase → pick the file. Same address, chats back.

No backup = no way back. Full steps: https://github.com/xAlisher/peers/blob/main/docs/TESTING.md#what-to-test-in-this-release

🔒 What changed

• Production release signing (#356). APK now verifies as CN=Peers / SHA-256 67083e…68bf, not the Android debug key.
• Everything from v0.8.9 (identity backup + restore, group desync auto-recovery) carries forward.

🔁 After this

Updates go back to being seamless — no more reinstalls.