Add signed iOS release workflow

clients/apple/VoiceCat.iOS/build-broadcast-extension.sh

@@ -10,8 +10,19 @@ project="$script_dir/../../../native/apple/broadcast/VoiceCatBroadcast.xcodeproj
 
 mkdir -p "$output"
 signing=()
+versioning=(MARKETING_VERSION="${VOICECAT_DISPLAY_VERSION:-0.0.1}")
+if [[ -n "${VOICECAT_BUILD_NUMBER:-}" ]]; then
+  versioning+=(CURRENT_PROJECT_VERSION="$VOICECAT_BUILD_NUMBER")
+fi
 if [[ "$sdk" == "iphonesimulator" ]]; then
   signing+=(CODE_SIGNING_ALLOWED=NO)
+elif [[ -n "${VOICECAT_BROADCAST_CODESIGN_KEY:-}" && -n "${VOICECAT_BROADCAST_CODESIGN_PROVISION:-}" ]]; then
+  signing+=(
+    DEVELOPMENT_TEAM="${VOICECAT_DEVELOPMENT_TEAM:?VOICECAT_DEVELOPMENT_TEAM is required for distribution signing}"
+    CODE_SIGN_STYLE=Manual
+    CODE_SIGN_IDENTITY="$VOICECAT_BROADCAST_CODESIGN_KEY"
+    PROVISIONING_PROFILE_SPECIFIER="$VOICECAT_BROADCAST_CODESIGN_PROVISION"
+  )
 elif [[ -n "${VOICECAT_DEVELOPMENT_TEAM:-}" ]]; then
   signing+=(DEVELOPMENT_TEAM="$VOICECAT_DEVELOPMENT_TEAM" CODE_SIGN_STYLE=Automatic)
   if [[ "${VOICECAT_ALLOW_PROVISIONING_UPDATES:-}" == "1" ]]; then
@@ -26,6 +37,7 @@ xcodebuild \
   -arch "$architecture" \
   -derivedDataPath "$output/derived" \
   CONFIGURATION_BUILD_DIR="$output" \
+  "${versioning[@]}" \
   "${signing[@]}" \
   build