Reusable release, signing, credentials, and stores

Master: https://github.com/stacksjs/the-settlers-iii-remake/issues/4

Extend existing Buddy release, desktop:apple, App Store Connect, and environment modules. A release receipt binds source, packages, tests, signed artifacts, and store processing results.

Completion gate

All mandatory child acceptance criteria require verified implementation evidence. Research, compilation, prototype victory, and uploaded but unprocessed binaries are not equivalent to completion. HomeOS integration is independent of supported game platform delivery.

Implementation issues

• https://github.com/stacksjs/stacks/issues/2959 - Complete encrypted production credential handling
• https://github.com/stacksjs/stacks/issues/2960 - Reconcile Apple signing and provisioning resources
• https://github.com/stacksjs/stacks/issues/2961 - Complete reusable iOS App Store delivery
• https://github.com/stacksjs/stacks/issues/2962 - Implement reusable Android and Google Play delivery
• https://github.com/stacksjs/stacks/issues/2059 - Complete desktop signing and distribution
• https://github.com/stacksjs/the-settlers-iii-remake/issues/99 - Prepare verified store content and declarations
• https://github.com/stacksjs/stacks/issues/2963 - Unify release orchestration and receipts

Dependencies

Work the actual child blocking graph. Do not make this entire epic a blocker for independent work. Sources and exact acceptance criteria are recorded in each child.