Builder v2: local project browser + multi-team ASC keys

Rewrites the builder console to browse local Xcode projects instead of
accepting source uploads or git URLs. Replaces the devices page with a
profiles page that manages ad-hoc provisioning profiles and lists
registered bundle IDs per team.

Adds multi-account support: ASC API keys are now stored in an asc_keys
table keyed by team_id (team_name, key_id, issuer_id, p8_filename). At
build time, the worker reads DEVELOPMENT_TEAM from the Xcode project and
auto-picks the matching key for fastlane sigh + JWT signing. Legacy
single-key settings auto-migrate on first boot.

Fixes storefront IPA parser to handle binary plists produced by Xcode.
Drops the enrollment bridge, device management routes, and direct
ASC API client -- fastlane sigh handles profile lifecycle now.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

package.json

@@ -8,14 +8,15 @@
     "dev": "node --watch src/server.js"
   },
   "dependencies": {
+    "bcrypt": "^5.1.1",
     "better-sqlite3": "^11.7.0",
+    "bplist-parser": "^0.3.2",
     "express": "^4.21.0",
     "express-session": "^1.18.1",
     "multer": "^1.4.5-lts.1",
     "plist": "^3.1.0",
+    "sharp": "^0.33.5",
     "unzipper": "^0.12.3",
-    "bcrypt": "^5.1.1",
-    "uuid": "^10.0.0",
-    "sharp": "^0.33.5"
+    "uuid": "^10.0.0"
   }
 }