ci: automate iOS App Store publishing

[Shinokawa]

Summary

• Build a separately signed App Store IPA while keeping the public GitHub Release IPA unsigned.
• Publish the signed build only after the GitHub Release succeeds, in parallel with the Homebrew update.
• Generate Simplified Chinese and English App Store release notes from the AI-generated GitHub changelog.
• Automatically submit the iOS version for App Review and release it after approval.

What Changed

• Added Apple Distribution signing and temporary signed-IPA artifact handling to the reusable iOS workflow.
• Added a post-release App Store publishing job using App Store Connect API credentials and fastlane.
• Added localized zh-Hans and en-US release-note generation with a 4000-character limit and up to five AI refinement attempts.
• Added existing-build detection so failed-job reruns can reuse an uploaded build instead of attempting a duplicate upload.
• Declared ITSAppUsesNonExemptEncryption=false and supplied the same export-compliance response during submission.
• Added a workflow input that can disable review submission while still allowing the release workflow to run.

Required Repository Configuration

Variables:

• APP_STORE_CONNECT_API_KEY_ID
• APP_STORE_CONNECT_ISSUER_ID
• Optional: APP_STORE_ZH_LOCALE (defaults to zh-Hans)
• Optional: APP_STORE_EN_LOCALE (defaults to en-US)

Secrets:

• IOS_DISTRIBUTION_CERTIFICATE_BASE64
• IOS_DISTRIBUTION_CERTIFICATE_PASSWORD
• APP_STORE_CONNECT_API_PRIVATE_KEY
• Existing APPLE_TEAM_ID
• Existing release AI configuration

Validation

• Parsed both modified workflows as YAML.
• Validated the new workflow paths with actionlint.
• Validated Info.plist with plutil.
• Compiled the Python helper and tested its 4000-character boundary and AI retry behavior.
• Checked the Ruby helper syntax.
• Installed fastlane 2.237.0 in an isolated environment and verified the used CLI options.

Related Issue

• No linked issue.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.