feat: Configure EAS production builds and app store submissions

[jbdevprimary]

Summary

Configure production build pipeline for app store submissions. Currently, staging builds work but production submissions are blocked pending credential setup.

Required Secrets

iOS (App Store)

• EXPO_APPLE_APP_SPECIFIC_PASSWORD - App-specific password for Apple account
• Apple Developer Program membership
• App Store Connect API key configured in EAS

Android (Play Store)

• EXPO_ANDROID_SERVICE_ACCOUNT_KEY_PATH - Google Play service account JSON key
• Google Play Developer account
• App signing configured in Play Console

Current State

• EAS builds work for development and preview profiles
• production profile builds work but submission is not configured
• Submit jobs removed from `cd.yml` pending credential setup

Immediate Plan

Until credentials are configured:

1. Release debug APK to GitHub Releases for testing
2. Use Render.com for staging web deployment (automatic via render.yaml)
3. Use EAS Update for OTA updates on PR previews

References

• EAS Submit Documentation
• App Store Connect API
• Google Play Developer API