Question: How to guard production build configurations

The documentation states it's recommended to guard both production app configurations and also production build configurations. I understand that my production app configuration is my main app module's release variant (in my app's build.gradle file). How and where should I configure it for my build configuration? I have a multi-module Android project with an included build (`build-logic`) and a few custom convention plugins.