fix: deterministic singing profiles

[bahadirgezer]

Notes

• Add deterministic signing profile and certificate handling to the CI workflow.
• Event state: action=closed merged=true.
• Net diff: 2 files changed, 144 insertions(+), 5 deletions(-).
• Changed files:
  • .github/workflows/testflight-auto.yml – clean provisioning cache, download profiles, resolve matching profile for imported certificate.
  • Charstack.xcodeproj/project.pbxproj – update Xcode variables.
• Commits: 0f2e8d7 (deterministic signing implementation), c65aa29 (Xcode vars bump).
• No breaking changes detected; workflow remains compatible with existing pipelines.

---

Autogenerated by Groq groq/compound.

[github-actions]

• Push 0f2e8d7
• Modified .github/workflows/testflight-auto.yml (1 file changed, 140 insertions, 1 deletion)
• Added step to clean local provisioning profile cache before download
• Added step to download provisioning profiles via apple-actions/download-provisioning-profiles@v5
• Added step Resolve matching profile for imported certificate with environment variables and script to select correct profile
• Included inline Python script that parses provisioning profiles, matches team ID, bundle ID, and certificate serial, and outputs the selected profile

---

Autogenerated by Groq groq/compound.