iOS auto-release CI/CD (GitHub Actions)

Org-standard signing credentials live in org-credentials.env next to this file (~/.claude/skills/ios-auto-release/org-credentials.env): ASC_KEY_ID, ASC_ISSUER_ID, ASC_PRIVATE_KEY_PATH, TEAM_ID=GU9WTSTX9M. install_on_device.sh sources it as a fallback, so no need to hunt sibling .env files or ask the user. The .p8 secret itself stays only at ~/.appstoreconnect/private_keys/. A project's own .env overrides these (set ASC_BUNDLE_ID). To install a dev build on a connected device: bash ~/.claude/skills/ios-auto-release/scripts/install_on_device.sh.

Make every push to main build, sign, upload, and submit for review automatically. The runner is macOS (Xcode is required to archive iOS apps). Auth for upload + submit is the existing App Store Connect API key — no new token is needed (though a dedicated CI key is good hygiene: Users and Access → Integrations → App Store Connect API → +).

The app record must already exist on App Store Connect (the API cannot create apps). Use the app-store-submission skill for the first manual submission; this skill automates the rest.

Fast path: upload a binary now via the ASC API (no CI round-trip)