Remove hardcoded Firebase credentials from the repo

The hardcoded Firebase credentials were removed for security concerns. They are now loaded from GitHub secrets during workflows in both 'docker.yml' and 'test.yml'. This provides the same functionality without exposing sensitive data on the repository. Additionally, the file has been added to .gitignore to prevent accidental commit in the future.

Author: thomedw

.github/workflows/docker.yml

@@ -39,6 +39,11 @@ jobs:
       - run: echo "$APPLICATION_SECRET_PROPERTIES" > src/test/resources/application-secret.properties
         env:
           APPLICATION_SECRET_PROPERTIES: ${{ secrets.APPLICATION_SECRET_PROPERTIES }}
+      - name: Get FIREBASE_JSON from secrets
+        run: |
+          echo $FIREBASE_JSON > src/main/resources/banyuwangi-dashboard-firebase-adminsdk.json
+        env:
+          FIREBASE_JSON: ${{ secrets.FIREBASE_JSON }}
       - name: Test and assemble with Gradle
         run: ./gradlew assemble
         env:

.github/workflows/test.yml

@@ -35,6 +35,11 @@ jobs:
     - run: echo "$APPLICATION_SECRET_PROPERTIES" > src/test/resources/application-secret.properties
       env:
         APPLICATION_SECRET_PROPERTIES: ${{ secrets.APPLICATION_SECRET_PROPERTIES }}
+    - name: Get FIREBASE_JSON from secrets
+      run: |
+        echo $FIREBASE_JSON > src/main/resources/banyuwangi-dashboard-firebase-adminsdk.json
+      env:
+        FIREBASE_JSON: ${{ secrets.FIREBASE_JSON }}
     - name: Install docker
       run: |
         command docker -v || curl -fsSL get.docker.com | sudo bash

.gitignore

@@ -42,3 +42,5 @@ out/
 *.mv.db
 *.trace.db
 *.lock.db
+
+src/main/resources/banyuwangi-dashboard-firebase-adminsdk.json