Bake Home Assistant token into release builds

README.md

@@ -46,7 +46,10 @@ TestFlight releases
 
 Gitea Actions publishes tags named `release/vX.X.X` to TestFlight. The semantic
 version from the tag and the Gitea `GITHUB_RUN_NUMBER` are written into the
-app's Info.plist before it is archived. For example:
+app's Info.plist before it is archived. The workflow also copies the
+`HOME_ASSISTANT_ACCESS_TOKEN` Gitea secret into the app's
+`HomeAssistantAccessToken` Info.plist entry and verifies the archived app
+contains it. For example:
 
 ```sh
 git tag -a release/v2.0.0 -m 'Release 2.0.0'
@@ -61,3 +64,4 @@ repository Actions secrets:
 - `ASC_KEY`
 - `MATCH_PASSWORD`
 - `MATCH_GIT_BASIC_AUTHORIZATION`
+- `HOME_ASSISTANT_ACCESS_TOKEN`