Losing an Android release signing key means every future update is permanently impossible. Here is the full lifecycle: generate once, back up twice in different failure domains, and wire four secrets into GitHub Actions with an unsigned fallback for forks.