docs: record 1.7.87 QA and channel status

AGENTS.md

@@ -2534,7 +2534,7 @@ Rules:
   or `FORGEJO_PASSWORD`; `scripts/release.sh` calls it automatically when either
   is set). It uploads the APK and checksum, but does not push git history.
 - **Self-hosted F-Droid repo:** `https://fdroid.skate-spots.org/repo`
-  (`org.skatespots.app`; currently 1.7.86, verified 2026-11-02). It is a **third-party repo**, not
+  (`org.skatespots.app`; currently 1.7.87, verified 2026-11-02). It is a **third-party repo**, not
   F-Droid main. Repo signing fingerprint:
   `88:B1:71:1C:24:02:89:FB:B2:A7:FC:C1:B3:1F:BB:9D:60:F5:7F:19:18:E0:3D:62:2D:35:F2:3D:E1:84:46:75`.
   The developer APK signature is unchanged; the repo key only signs indexes.

docs/QA_MATRIX.md

@@ -22,11 +22,11 @@ checks are explicitly marked untested until someone runs them.
 
 | Channel | Version | Result | Notes |
 | --- | --- | --- | --- |
-| Web | 1.7.87 | PASS | Production deploy after release commit |
+| Web | 1.7.87 | PASS | Production deploy from `06c1d64` |
 | Zapstore | 1.7.87 | PASS | Release event + current icon on relay |
 | Forgejo | 1.7.87 | PASS | APK + `.sha256` assets |
-| F-Droid self-hosted repo | 1.7.86 → 1.7.87 | PASS | `index-v2.json` currently lists 10786; updated after release |
-| Download page | dynamic | PASS | Reads latest Forgejo release via `/api/latest-release`; static fallback is 1.7.87 |
+| F-Droid self-hosted repo | 1.7.87 | PASS | `index-v2.json` lists versionCode 10787 |
+| Download page | dynamic | PASS | Live `/api/latest-release` returns 1.7.87; static fallback is 1.7.87 |
 
 ## Still requires a real device