fix: prevent dev/debug data stores from restoring on fresh install

Exclude beta-flags, user-flag-overrides, and release-stage DataStore
files from Android Auto Backup. Reset each on fresh install using
noBackupFilesDir marker files to prevent stale overrides, sandbox
routing, or incorrect release stage classification after restore.

Signed-off-by: Brandon McAnsh <git@bmcreations.dev>

Author: bmc08gt

apps/flipcash/app/src/main/AndroidManifest.xml

@@ -43,6 +43,8 @@
     <application
         android:name="com.flipcash.app.FlipcashApp"
         android:allowBackup="true"
+        android:fullBackupContent="@xml/backup_rules"
+        android:dataExtractionRules="@xml/data_extraction_rules"
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:largeHeap="true"

apps/flipcash/app/src/main/res/xml/backup_rules.xml

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<full-backup-content>
+    <exclude
+        domain="file"
+        path="datastore/beta-flags.preferences_pb" />
+    <exclude
+        domain="file"
+        path="datastore/user-flag-overrides.preferences_pb" />
+    <exclude
+        domain="file"
+        path="datastore/release-stage.preferences_pb" />
+</full-backup-content>

apps/flipcash/app/src/main/res/xml/data_extraction_rules.xml

@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="utf-8"?>
+<data-extraction-rules>
+    <cloud-backup>
+        <exclude
+            domain="file"
+            path="datastore/beta-flags.preferences_pb" />
+        <exclude
+            domain="file"
+            path="datastore/user-flag-overrides.preferences_pb" />
+        <exclude
+            domain="file"
+            path="datastore/release-stage.preferences_pb" />
+    </cloud-backup>
+    <device-transfer>
+        <exclude
+            domain="file"
+            path="datastore/beta-flags.preferences_pb" />
+        <exclude
+            domain="file"
+            path="datastore/user-flag-overrides.preferences_pb" />
+        <exclude
+            domain="file"
+            path="datastore/release-stage.preferences_pb" />
+    </device-transfer>
+</data-extraction-rules>

apps/flipcash/shared/appupdates/src/main/kotlin/com/flipcash/app/updates/internal/GooglePlayReleaseStageProvider.kt

@@ -11,6 +11,7 @@ import com.flipcash.app.updates.resolveStage
 import kotlinx.coroutines.flow.firstOrNull
 import kotlinx.coroutines.flow.map
 import kotlinx.serialization.json.Json
+import java.io.File
 import okhttp3.OkHttpClient
 import okhttp3.Request
 import timber.log.Timber
@@ -31,6 +32,14 @@ internal class GooglePlayReleaseStageProvider(private val context: Context) : Re
         private set
 
     override suspend fun loadCachedStage(versionCode: Int): ReleaseStage? {
+        // Clear cached manifest restored from backup on fresh install.
+        val marker = File(context.noBackupFilesDir, "release-stage-initialized")
+        if (!marker.exists()) {
+            context.releaseStageDataStore.edit { it.clear() }
+            marker.createNewFile()
+            return null
+        }
+
         val cached = context.releaseStageDataStore.data
             .map { prefs -> prefs[MANIFEST_KEY] }
             .firstOrNull()

apps/flipcash/shared/featureflags/src/main/kotlin/com/flipcash/app/featureflags/internal/InternalFeatureFlagController.kt

@@ -21,6 +21,7 @@ import kotlinx.coroutines.flow.map
 import kotlinx.coroutines.flow.onEach
 import kotlinx.coroutines.flow.stateIn
 import kotlinx.coroutines.launch
+import java.io.File
 import javax.inject.Inject
 
 internal class InternalFeatureFlagController @Inject constructor(
@@ -49,6 +50,15 @@ internal class InternalFeatureFlagController @Inject constructor(
         FeatureFlag.entries
             .filter { it.launched }
             .onEach { reset(it) }
+
+        // Clear beta flags restored from backup on fresh install.
+        // noBackupFilesDir is never included in Auto Backup, so the marker
+        // file won't exist after a restore — triggering a full reset.
+        val marker = File(context.noBackupFilesDir, "beta-flags-initialized")
+        if (!marker.exists()) {
+            reset()
+            marker.createNewFile()
+        }
     }
 
     override fun enableBetaFeatures() {

apps/flipcash/shared/userflags/src/main/kotlin/com/flipcash/app/userflags/UserFlagsCoordinator.kt

@@ -13,6 +13,7 @@ import com.flipcash.services.models.UserFlags
 import com.flipcash.services.user.UserManager
 import com.getcode.opencode.model.financial.Fiat
 import dagger.hilt.android.qualifiers.ApplicationContext
+import java.io.File
 import kotlinx.coroutines.CoroutineScope
 import kotlinx.coroutines.SupervisorJob
 import kotlinx.coroutines.flow.SharingStarted
@@ -64,6 +65,15 @@ class UserFlagsCoordinator @Inject constructor(
         produceFile = { context.preferencesDataStoreFile("user-flag-overrides") }
     )
 
+    init {
+        // Clear overrides restored from backup on fresh install.
+        val marker = File(context.noBackupFilesDir, "user-flag-overrides-initialized")
+        if (!marker.exists()) {
+            clearAll()
+            marker.createNewFile()
+        }
+    }
+
     // Parse DataStore prefs → Overrides
     private val overrides: StateFlow<Overrides> = dataStore.data.map { prefs ->
         Overrides(