Stabilize auth flow and profile images

scripts/android-device.env.example

@@ -0,0 +1,18 @@
+# Copy this file to scripts/.env.android-device.local for physical Android device checks.
+
+# Physical devices cannot use the Android emulator-only 10.0.2.2 host alias.
+# Preferred path:
+#   adb reverse tcp:5000 tcp:5000
+#   adb reverse tcp:5001 tcp:5001
+#   TDC114_API_BASE=http://127.0.0.1:5000
+#   TDC114_AUTH_API_BASE=http://127.0.0.1:5001
+#
+# Fallback path:
+#   TDC114_API_BASE=http://<PC_LAN_IP>:5000
+#   TDC114_AUTH_API_BASE=http://<PC_LAN_IP>:5001
+TDC114_API_BASE=http://127.0.0.1:5000
+TDC114_AUTH_API_BASE=http://127.0.0.1:5001
+
+# Use a test phone number that exists in the local Baron SSO test data.
+TDC114_SMOKE_PHONE=01012345678
+TDC114_SMOKE_ASSUME_LOGGED_IN=1