feat: persist local configuration and device identity (#3)

Store receiver and identity together in Keychain, with versioned tracking
preferences, explicit authorization retry and stable Settings focus.
Adopt free Apple Development locally and credential-free ad hoc CI.
Run configuration and focus tests through both CI toolchains.

Final decisions: https://github.com/jayanezj/traccar-client-macos/issues/3#issuecomment-6396087703

scripts/verify-build.sh

@@ -6,6 +6,8 @@ case "$build_root" in
     /*) ;;
     *) echo "The build directory must be an absolute path." >&2; exit 2 ;;
 esac
+repo_root="$(cd "$(dirname "$0")/.." && pwd)"
+source "$repo_root/scripts/signing-options.sh"
 
 for configuration in Debug Release; do
     app="$build_root/DerivedData/Build/Products/$configuration/Traccar Client macOS.app"
@@ -14,4 +16,25 @@ for configuration in Debug Release; do
     test "$(lipo -archs "$executable")" = arm64
     test "$(xcrun vtool -show-build "$executable" | awk '/minos/ {print $2}')" = 15.0
     codesign --verify --strict "$app"
+    metadata="$(codesign --display --verbose=4 "$app" 2>&1)"
+    case "$signing_mode" in
+        development)
+            if [[ "$metadata" != *"Authority=Apple Development:"* ]]; then
+                echo "Expected an Apple Development signature for $configuration." >&2
+                exit 1
+            fi
+            team="$(awk -F= '/^TeamIdentifier=/ {print $2}' <<< "$metadata")"
+            if [[ -z "$team" || "$team" == "not set" || -e "$app/Contents/embedded.provisionprofile" ]]; then
+                echo "Expected a development Team and no provisioning profile for $configuration." >&2
+                exit 1
+            fi
+            ;;
+        adhoc)
+            if [[ "$metadata" != *"Signature=adhoc"* ]]; then
+                echo "Expected an ad hoc signature for $configuration." >&2
+                exit 1
+            fi
+            ;;
+    esac
+    echo "Verified $configuration: arm64, macOS 15.0 minimum, $signing_mode signature."
 done