feat(iap): wire real AdMob app id, banner and interstitial units

App id always uses the real value (SDK init only, no ad-serving risk).
Banner/interstitial pick the real unit id in release builds and Google's
test unit id everywhere else, so debug/profile builds can never serve
(or accidentally tap) a real ad.

android/app/src/main/AndroidManifest.xml

@@ -138,16 +138,14 @@
             android:name="com.google.android.gms.car.application"
             android:resource="@xml/automotive_app_desc" />
 
-        <!--
-            AdMob application id (iap-freemium-unlock).
-            TODO: this is Google's OFFICIAL TEST app id
-            (ca-app-pub-3940256099942544~3347511713) — swap for the real
-            AdMob app id once provisioned in the AdMob console. Never ship
-            the test id to production.
-        -->
+        <!-- AdMob application id (iap-freemium-unlock). Real id, provisioned
+             in the AdMob console. Safe to use in all build modes — this id
+             only initializes the SDK; it never serves an ad by itself, so it
+             carries none of the "don't tap your own ads" risk that ad unit
+             ids do. -->
         <meta-data
             android:name="com.google.android.gms.ads.APPLICATION_ID"
-            android:value="ca-app-pub-3940256099942544~3347511713" />
+            android:value="ca-app-pub-6038935671414339~4085536467" />
     </application>
     <queries>
         <intent>