scan, privacy answers and credentials from a second game's first release (lessons 35-37): review-prompt needs rating context, not a bare "rate"; account signals skip import lines and module paths, config-only accounts say "from config"; accounts.inApp without deletion code stays a medium 5.1.1(v) finding; privacy-manifest --propose builds NSPrivacyCollectedDataTypes from appPrivacy.types and check warns on an empty list; appPrivacy.types is authoritative in the App Privacy sheet (unlisted = not collected), ad / support / AR types default to not collected without tracking or ad SDKs; Play advertising ID from SDKs, the AD_ID permission, app-ads.txt or the flag, never from a Device ID alone; scan.ignore[].evidence and warnings for entries that match nothing; empty credentials template, placeholder values count as missing (check, doctor)

cli/data/flags.json

@@ -312,35 +312,62 @@
    "unity"
   ],
   "console fill": [
+   "capacitor",
    "cdp",
    "chrome-profile",
+   "cordova",
+   "cordova-android",
+   "cordova-ios",
    "debug-dump",
+   "expo",
+   "flutter",
    "fresh-profile",
+   "godot",
    "profile",
+   "react-native",
    "start-url",
    "step-timeout",
    "store",
+   "unity",
    "use-chrome-session"
   ],
   "console plan": [
+   "capacitor",
    "cdp",
    "chrome-profile",
+   "cordova",
+   "cordova-android",
+   "cordova-ios",
    "debug-dump",
+   "expo",
+   "flutter",
    "fresh-profile",
+   "godot",
    "lookup",
    "name",
    "profile",
+   "react-native",
    "sku",
    "start-url",
    "step-timeout",
    "store",
+   "unity",
    "use-chrome-session"
   ],
   "console verify": [
+   "capacitor",
+   "cordova",
+   "cordova-android",
+   "cordova-ios",
+   "expo",
+   "flutter",
    "from-text",
+   "godot",
    "name",
+   "react-native",
    "sku",
-   "text"
+   "text",
+   "unity"
   ],
   "desktop": [
    "channel",