It doesn't matter if the values will be rendered with a Merge Tag or if they are inserted manually. Ie. if you'd like to include a includes/xample.zip file from WordPress root directory, you just need to write that in the file field in the attachments section.
For security reasons, you cannot attach hidden files (starting with the .) nor WordPress files (starting with wp). These will be skipped without any warning.