Authentication is not a question (v1.64.6.0)

[time-attack]

Live nimbus test caught the adapter asking the user to pick between three auth paths, with an Aside-driven API key as the recommended option. Product owner's verdict: the baseline user has exactly one path, so there is nothing to ask.

The adapter now resolves auth silently and deterministically:

• .p8 already on the machine → use it via xcodebuild key flags, no question.
• Otherwise (the baseline user) → one line: "fastlane is required for the upload, installing it" (brew install fastlane, covered by the /ship authorization), then fastlane spaceauth. The user's entire contribution is their password and one 2FA code.

Auth-path menus, API-key options shown to keyless users, and browser drives for credential creation are now explicit contract violations. Storefront CLI selection follows the resolved credential (session → deliver, key → asc) with no second question.

Test evidence: test:gstack2 gate green (parity 4,359), release-hardening 11/11.

🤖 Generated with Claude Code

---

Summary by cubic

Make Apple release authentication automatic and deterministic. If a .p8 key is present we use xcodebuild key flags; otherwise we install fastlane and mint FASTLANE_SESSION—no prompts or menus.

• New Features
  • Silent auth resolution: .p8 → xcodebuild -authenticationKey*; else install fastlane and run fastlane spaceauth. Removed auth-path menus and browser-driven credential creation.
  • Storefront CLI follows the credential: session → deliver; key → asc. Docs updated and version bumped to 1.64.6.0.

^{Written for commit c3d6597. Summary will update on new commits.}

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.