Build with Tuist 4.203.1

[khoi]

Issue: none (maintainer upkeep; write-access contributors are exempt)

Summary

• Update the pinned Tuist CLI from 4.180.0 to the current stable 4.203.1.
• Keep the existing GitHub Actions OIDC login because it matches current Tuist guidance and passes live CI.
• Accept Tuist's lockfile URL normalization without changing package versions or revisions.

The 4.203 line lets generation use the local cache during short server failures, which keeps Supacode builds working when the remote cache cannot respond.

Type of change

• Bug fix (the linked issue is a bug report)
• Feature (the linked issue is a feature request marked ready)
• Documentation
• Other: build tooling

How was this tested?

• make check passes (format + lint)
• make test passes
• I built and ran the app to confirm the change works
• make build-app passes
• make inspect-dependencies passes
• CI-mode tuist install --force-resolved-versions passes

The app was not run because this task excludes local GUI testing.

AI tool disclosure (optional)

• Model(s): GPT-5
• Harness / tools: Codex, gh

Checklist

• This pull request is linked to an issue with Closes # above.
• For a feature, the linked issue is labeled ready.
• I am the author of this work and accountable for it; no commit is authored or co-authored by an AI agent.
• I have read the Contributing guide and the Code of Conduct.