The Play App Signing fingerprint point is a good one, that mismatch is easy to miss because the app links just fall back to the browser silently. On the offline gap with the live-URL model, a service worker that caches the app shell and serves stale API reads for quotes and invoices would keep it usable without bundling. It is also worth checking whether the server errorPath option in the Capacitor config can show a local offline page when the URL fails to load.