Harden Apple release integrity and exact-source publishing

[PrzemyslawKlys]

Summary

Adds end-to-end Apple release integrity controls across exact-source validation, archive/export/upload/notarization, App Store screenshot synchronization, durable recovery receipts, and Studio orchestration.

What changed

• Binds Apple release operations to a clean, exact Git source commit and validates the complete effective Xcode and SwiftPM input graph.
• Uses private immutable snapshots, physical-identity checks, mutation monitoring, and hash-bound publication for archives, exports, packages, notarization artifacts, and screenshots.
• Adds durable, authenticated receipt and checkpoint evidence for safe resume, ambiguity handling, explicit adoption, and remote-mutation reconciliation, including supported unpinned legacy releases.
• Distinguishes definite local upload failures from indeterminate remote mutations at the process-start boundary.
• Rejects overlapping Apple source, screenshot, archive, export, automation-output, and artifact paths before execution.
• Keeps PowerShell, CLI, Studio, and pinned operator surfaces thin over shared PowerForge release services.

Operational notes

• Apple mutations remain deliberate local operations on the trusted development Mac; GitHub Actions stays read-only.
• Repository-native SHA-1 and SHA-256 commit IDs are accepted where source commits are supplied.
• Ambiguous upload or notarization outcomes block automatic retry until remote evidence is reconciled or explicitly adopted.

Validation

• 694/694 exact-head Apple, App Store Connect, Xcode, archive, upload, notarization, and process-integrity tests.
• 362/362 complete Studio exact-source contracts on the current head, including five focused GCC search-root and linker alias cases.
• Focused exact-package archive, screenshot path-isolation, and secure remote-mirror lease regressions.
• PowerForge and PSPublishModule Release builds for net472, net8.0, and net10.0 with zero warnings.
• PowerForge Studio Orchestrator net10.0 Release build with zero warnings.
• Retained live clean CasaRay exact-source verification of its tracked Swift package graph.

Dependency

PR #705 is merged; this PR is the dependent Apple release-integrity layer.