Read Lua team ID from repository variables

[ojowwalker77]

What changed

• reads APPLE_TEAM_ID from the repository variable that is already configured
• preserves a secret with the same name as an optional override
• documents the team ID as a variable rather than a secret

Root cause

The first v0.1.0 release reached the credential preflight with every private credential populated, but TEAM_ID was empty because the workflow read secrets.APPLE_TEAM_ID while the repository stores it in vars.APPLE_TEAM_ID.

Validation

• exact failure verified in release run 29579446394
• git diff --check
• no local build, test, package, or app launch; GitHub Actions remains the validation authority