[Goooler]

It would be easier to test the plugin logic in the sample App, we don't have to rely on the published version.

[dkhawk]

Thank you @Goooler! Switching the root project to includeBuild("secrets-gradle-plugin") and displaying both the BuildConfig and AndroidManifest keys in MainActivity makes testing the local plugin in :sample-app much cleaner.

[Goooler]

CRITICAL: The following mandatory checks failed:
- zizmor/unpinned-uses at line 32 of .github/workflows/test.yml: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- zizmor/unpinned-uses at line 35 of .github/workflows/test.yml: unpinned action reference: action is not pinned to a hash (required by blanket policy)

Unrelated failure, needs to fix them separately.