tests/fixtures/README.md

Test fixtures

• groq/ — canned Groq responses for E2E_FIXTURE_MODE (see utils/groq_client.py, ADR-0013).
• fake-service-account.json — not a real credential. A throwaway RSA key generated locally (openssl genpkey) and never registered with any Google Cloud project. It exists only so firebase_admin.credentials.Certificate() has a syntactically valid key to parse when the backend initializes against the local Firebase Emulator Suite in E2E tests (playwright.config.ts) — the emulators never validate it against real Google infrastructure. If a secret scanner flags this file: it's a known, intentional fixture, not a leaked key.