Set up App Store Connect and internal TestFlight CI

[enaboapps]

Summary

Configure App Store Connect and add an internal TestFlight release workflow for Switchify Remote, using the existing iOS identity and shared release build ordinal.

Acceptance criteria

• Register com.enaboapps.switchify.remote, create the App Store Connect record, and configure the automatically distributed Switchify Internal group.
• Add Apple team and export-compliance configuration without changing the app identity.
• Add a secure TestFlight workflow for published prereleases and a validated Beta 11 backfill.
• Reuse the existing App Store Connect API key and keep all signing assets in GitHub secrets and an encrypted local backup.
• Add a dependency-free App Store Connect helper with tests for JWTs, lookup, polling, idempotency, timeout, and sanitized failures.
• Document credential renewal, export compliance, and the dual Play/TestFlight prerelease procedure.
• Pass repository validation, clean iOS prebuild/build checks, independent review, and CI.
• Leave the implementation PR unmerged until explicit approval; close this issue only after build 13 processes in TestFlight and passes the physical iPad smoke test.

[enaboapps]

PR #91 prepares the reviewed release automation and closes setup issue #92. This tracker remains open until Beta 11 build 13 processes in TestFlight and passes the physical iPad smoke test.

[enaboapps]

Apple-side setup and pre-upload validation are complete:

• Explicit App ID, Apple Distribution certificate, App Store provisioning profile, App Store Connect app record, and automatically distributed Switchify Internal group are configured.
• The Account Holder is in the internal group.
• TestFlight feedback and privacy metadata persist after reload.
• Build 13 was archived, exported, signature/profile checked, and accepted by altool validation without uploading.
• PR ci: add internal TestFlight releases #91 remains draft with green CI and a clean independent review.

This tracker stays open until approval to merge, the release workflow uploads build 13, TestFlight processing succeeds, and the physical iPad smoke test passes.

[enaboapps]

Internal TestFlight upload is complete:

• PR ci: add internal TestFlight releases #91 merged the release workflow.
• Follow-up PRs Fix TestFlight workflow temp paths #93 and Declare export compliance for TestFlight tag builds #94 fixed two pre-upload gates discovered during the first dispatch attempts; each received a clean independent latest-head review and green required CI before merge.
• Workflow run 32647741896 completed successfully.
• Build 13 is VALID, uses ITSAppUsesNonExemptEncryption=false, and is assigned to the automatically distributed Switchify Internal group.
• Temporary CI signing material was cleaned up.

The connected iPad currently has Switchify Remote build 11 but did not have Apple TestFlight installed. Apple’s official TestFlight App Store page is open on the device. This issue remains open pending the TestFlight install and physical Bluetooth/control smoke test.