docs(AGENTS): add the full Zapstore publish sequence

AGENTS.md

@@ -1901,6 +1901,21 @@ Rules:
   - No NIP-07 browser extension is installed, so `SIGN_WITH=browser` fails. Use `bunker://…` (Amber) or `nsec1…`.
   - `zapstore.yaml` sets `release_source` → local APK, `release_notes` → `release-notes.txt`, `icon` → `public/images/icon-1024.png`.
   - Dry run (no upload): `SIGN_WITH='<signer>' zsp publish --offline zapstore.yaml`.
+  - **Full publish sequence** (run from the repo root; replace `1.5.13` and the signer):
+    ```bash
+    # 1) bump the version — package.json is the single source of truth
+    npm version 1.5.13 --no-git-tag-version
+    # 2) edit the TOP of release-notes.txt (start with the notes, NOT "vX.Y.Z")
+    # 3) build the signed release APK (syncs the version into the APK)
+    npm run android:build
+    # 4) dry run — parses + signs, uploads nothing
+    SIGN_WITH='bunker://<amber-connection>' zsp publish --offline zapstore.yaml
+    # 5) publish for real
+    SIGN_WITH='bunker://<amber-connection>' zsp publish zapstore.yaml
+    ```
+    ⚠️ `zsp` reads the **version from the built APK** (synced from `package.json` by
+    `android:build`) — bump **only** `package.json`. Publish needs the **signer awake**
+    (open Amber in the foreground). `SIGN_WITH=browser` fails here (no NIP-07 extension).
 
 ### Relay archive (dataset backup)
 - **Transfer content between keys (`scripts/transfer-content.mjs`, 2026-10-04):**