iOS: default build is dev + prov, public only on request

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

ios/scripts/build-ipa.sh

@@ -5,6 +5,7 @@
 # Finished IPAs are kept per version; build/work is scratch and is wiped each run.
 # "build-ipa.sh dev" builds only build/dev/stemify-<version>-dev.ipa: bundle id org.cdnutter.stemify-dev,
 # named "Stemify Dev", ad-hoc signed, so it installs next to the release app. For internal tests, never released.
+# "build-ipa.sh prov" builds only the signed prov IPA (no public one).
 # ios/scripts/build-remote.sh runs this on White-M1 and copies build/public and build/prov back to DevOps.
 set -euo pipefail
 cd "$(dirname "$0")/.."
@@ -41,9 +42,11 @@ if [ "$MODE" = dev ]; then
 fi
 
 # Public build, for the releases and AltStore/Sideloadly.
-rm -f $B/public/stemify-$VERSION.ipa
-(cd $OUT && zip -qry ../public/stemify-$VERSION.ipa Payload)
-echo "$B/public/stemify-$VERSION.ipa"
+if [ "$MODE" != prov ]; then
+  rm -f $B/public/stemify-$VERSION.ipa
+  (cd $OUT && zip -qry ../public/stemify-$VERSION.ipa Payload)
+  echo "$B/public/stemify-$VERSION.ipa"
+fi
 
 if [ -f prov/Stemify.mobileprovision ] && [ -f prov/key.p12 ] && [ -n "${P12_PASS:-}" ]; then
   KC=$PWD/$OUT/sign.keychain-db; KP=$(uuidgen)