- .github/workflows/mobile-release.yml: validate (npm ci + tsc) on every
run with no secrets, plus an EAS Build job gated on workflow_dispatch or
a `mobile-v*` tag. Requires only the EXPO_TOKEN secret.
- app/eas.json: development / preview (iOS simulator, no Apple account) /
production (signed, EAS-managed Apple credentials) build profiles.
Claude