Add auto-deploy CI: build unsigned .ipa and publish to SideStore source

Builds VoidLink via xcodebuild (no signing) on the macOS runner, packages
the .app into an .ipa, and uploads .ipa + metadata + icon to perlis so it
can be installed from the SideStore source at apps.bueso.eu.

.gitea/workflows/build.yml

@@ -0,0 +1,86 @@
+name: Build VoidLink IPA
+
+on:
+  push:
+    branches:
+      - Integration
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: Build .ipa and publish source
+    runs-on: macos
+    env:
+      # Per-app: change APP_NAME for each app repo. Used everywhere so the
+      # perlis dir name and file names always match (no hardcoded drift).
+      APP_NAME: VoidLink
+      # Point xcodebuild at full Xcode without sudo (sudo hangs in CI).
+      # DEVELOPER_DIR overrides the active developer directory for all steps.
+      DEVELOPER_DIR: /Applications/Xcode.app/Contents/Developer
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Checkout submodules
+        run: git submodule update --init --recursive
+
+      - name: Select Xcode
+        run: xcodebuild -version
+
+      - name: Build unsigned .ipa
+        run: |
+          # Build the app (no signing — SideStore signs on-device).
+          # VoidLink's scheme is auto-generated from the VoidLink target.
+          xcodebuild \
+            -scheme VoidLink \
+            -sdk iphoneos \
+            -configuration Debug \
+            archive \
+            -archivePath $PWD/build/VoidLink.xcarchive \
+            CODE_SIGN_IDENTITY="" \
+            CODE_SIGNING_REQUIRED="NO" \
+            CODE_SIGN_ENTITLEMENTS="" \
+            CODE_SIGNING_ALLOWED="NO"
+
+          # Package the .app bundle into an .ipa (Payload/App.app structure)
+          mkdir -p build/IPA/Payload
+          cp -R build/VoidLink.xcarchive/Products/Applications/VoidLink.app build/IPA/Payload/VoidLink.app
+          cd build/IPA
+          zip -r ../../$APP_NAME.ipa Payload
+          cd ../..
+          ls -la $APP_NAME.ipa
+
+      - name: Generate app metadata
+        run: |
+          VERSION="1.0"
+          SIZE=$(stat -f%z $APP_NAME.ipa)
+          DATE=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+          # Per-app metadata file. The perlis aggregator folds this into the
+          # root source.json at https://apps.bueso.eu/source.json.
+          cat > $APP_NAME.json <<EOF
+          {
+            "name": "VoidLink",
+            "bundleIdentifier": "com.voidlink.tf.iOS",
+            "developerName": "Luis",
+            "localizedDescription": "VoidLink (Moonlight fork) - stream from your PC. Built via Gitea Actions.",
+            "iconURL": "https://apps.bueso.eu/$APP_NAME/icon.png",
+            "downloadURL": "https://apps.bueso.eu/$APP_NAME/$APP_NAME.ipa",
+            "version": "$VERSION",
+            "versionDate": "$DATE",
+            "size": $SIZE,
+            "permissions": []
+          }
+          EOF
+          cat $APP_NAME.json
+
+      - name: Upload to source host (perlis)
+        run: |
+          # Upload .ipa + per-app metadata + icon to perlis via SSH.
+          # PERLIS_SSH_HOST is the Tailscale MagicDNS name (perlis.bueso.loc),
+          # reachable from the iMac runner over the Tailscale mesh.
+          ssh -o StrictHostKeyChecking=no \
+            "${{ secrets.PERLIS_SSH_USER }}@${{ secrets.PERLIS_SSH_HOST }}" \
+            "mkdir -p /mnt/appdata/ios-apps/$APP_NAME"
+          scp -o StrictHostKeyChecking=no \
+            $APP_NAME.ipa $APP_NAME.json icon.png \
+            "${{ secrets.PERLIS_SSH_USER }}@${{ secrets.PERLIS_SSH_HOST }}:/mnt/appdata/ios-apps/$APP_NAME/"