I just signed up with Firebase and I created a new project. Firebase asked me for my app domain and a SHA1 debug key. I input these details and it generated a google-service
From this discussion it seems you can add it to a public repo. Its content ends up in the APK anyway and is probably easy to extract.