Under your app's Credentials tab, upload your APNs .p8 key (Apple Developer portal → Keys) and your Firebase service account JSON (Firebase console → Project settings → Service accounts → Generate new private key).

Both are encrypted with AES-GCM before being written to D1. The raw key material is never exposed back to you or to anyone else via the API.