Update HACKING.md

mention the app key under the manifest file