feat(skills): add React Native deployment skill with Fastlane

[rudra-chothe]

Summary

Adds a new deployment skills category for React Native release engineering:

• Go/no-go publish readiness checklist (App Store + Play Store)
• Fastlane + GitHub Actions deployment automation (Android + iOS)
• E2E pre-publish release gates
• Android 16KB page-size alignment treated as a local prerequisite before Android deploy

Closes

Closes #28

Key Changes

• New skill: skills/deployment/

  • SKILL.md orchestrates the flow and includes the 16KB local prerequisite step
  • references/publish-checklist.md adds an explicit Android 16KB blocker rule and links to:
    skills/react-native-best-practices/references/native-android-16kb-alignment.md
  • references/fastlane-deployment.md includes:
    • Recommended Android dynamic lane (track + Play Console versionCode discovery)
    • Recommended iOS lane (TestFlight internal/external + App Store)
    • GitHub Actions workflow with tag + manual workflow_dispatch inputs for Android track and iOS target
    • GitHub Actions secret decoding + early secret validation step
  • references/e2e-prepublish-tests.md provides gating guidance (Detox/Maestro etc.)

• Discoverability updates

  • README.md: adds the deployment skill to the available skills list + install command
  • .claude-plugin/marketplace.json: registers the new deployment plugin entry

Secrets Handling (security requirement)

Credentials are expected only via GitHub Actions repository secrets:

• GOOGLE_PLAY_JSON_KEY_BASE64
• APP_STORE_CONNECT_API_KEY_BASE64
  (plus APP_STORE_CONNECT_KEY_ID, APP_STORE_CONNECT_ISSUER_ID when using the API-key Appfile path)

The workflow decodes them at runtime to:

• fastlane/play-store-account.json
• fastlane/AuthKey.p8

Practical Validation / Testing

1. Run zipalign -P 16 locally on a release Android build artifact using the guidance in the linked 16KB reference.
2. Only after the local 16KB verification passes, run your Fastlane Android lane (e.g., internal track) using the recommended pattern.
3. Trigger the GitHub Actions workflow via:
   • workflow_dispatch with selected android_track and ios_release_target, or
   • a semver tag push (vX.Y.Z)
4. Confirm the workflow:
   • passes the “required secrets exist” step
   • decodes keys successfully
   • proceeds to Fastlane deploy/upload

Files

• New: skills/deployment/**
• Updated: README.md, .claude-plugin/marketplace.json

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 31dba2229a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".