BE021 - Release configuration validation checklist

[DulajGunarathna2004]

Summary

This PR adds the BE021 release configuration validation checklist for the Food Remedy mobile app.

The checklist documents repository-only findings for release-critical configuration areas, including Firebase, hCaptcha, Expo app configuration, EAS build configuration, backend API URL configuration, environment variables, hard-coded values, fallbacks, risky assumptions, and items requiring external production confirmation.

Configuration Areas Reviewed

• Firebase configuration in config/firebaseConfig.ts
• Captcha/hCaptcha configuration in config/captchaConfig.ts
• Expo application configuration in app.json
• EAS build profiles in eas.json
• Backend API base URL configuration in services/apiClient.ts
• Related environment variable usage across the repository
• Relevant hard-coded values, defaults, and fallbacks

Key Findings

• Firebase contains hard-coded project configuration values.
• Firebase measurement ID depends on EXPO_PUBLIC_FIREBASE_MEASUREMENT_ID.
• hCaptcha uses EXPO_PUBLIC_HCAPTCHA_SITE_KEY with a hard-coded fallback key.
• Captcha defaults off in development and on in production unless overridden.
• EAS production profile exists but does not declare production environment variables.
• Backend API base URL depends on EXPO_PUBLIC_API_BASE_URL.
• API base URL can fall back to an empty string if not configured.
• Production Firebase, hCaptcha, EAS, and API values require external production confirmation.

Safety Notes

• No source configuration files were changed.
• No live Firebase resources were modified.
• No hCaptcha provider settings were modified.
• No EAS, Expo, or deployment settings were changed.
• No production values were invented.
• No secrets were added.
• Findings are based only on repository evidence.

Changed Files

• docs/backend/release-config-checklist.md

Validation

Repository-safe inspection/search commands were used to review configuration references, including searches for:

• EXPO_PUBLIC_
• process.env
• Firebase configuration
• captcha/hCaptcha configuration
• localhost/development URLs
• API base URL references
• project IDs and app IDs