Update docs

zapstore.yaml

@@ -1,12 +1,16 @@
 # ZapStore config for io.gart.app. Public whitelisting anchor for the
 # private gart/gart-app repo. Setup procedure: gart-app/docs/zapstore-publishing.md.
 #
-# Metadata + assets are sourced from our self-hosted F-Droid repo at
-# https://f-droid.gart.io/fdroid/repo. zsp does NOT auto-harvest from
-# self-hosted F-Droid instances (its `metadata_sources: [fdroid]` host
-# allowlist is hardcoded to f-droid.org and apt.izzysoft.de — see
-# zapstore/zsp internal/config/config.go), so every field below mirrors
-# what fdroidserver published into index-v2.json by hand.
+# CI publish path: `zsp publish ./release/gart.apk -r <gitea-url>` — the
+# signed APK is passed directly so zsp's source autodetection (which only
+# recognises github.com / gitlab.com / codeberg.org / f-droid.org /
+# apt.izzysoft.de hostnames in internal/config/config.go) is bypassed
+# entirely (source type = local). Neither `release_source` below nor the
+# Gitea URL is fetched by zsp; every metadata field is mirrored from what
+# fdroidserver published into index-v2.json by hand.
+#
+# `release_source` is kept as a human-readable pointer to where the public
+# APK lives — it is informational, not consumed by CI.
 
 repository: https://gitea.gart.io/gart/gart-app-releases