fix(ioscompanion): re-enable signing for the device runner build

companion/project.yml disables code signing for the simulator build, so
the device build inherited it and produced an unsigned runner that the
device rejected at install (0xe8008018). build-for-testing now forces
CODE_SIGNING_ALLOWED/REQUIRED=YES so automatic provisioning signs it.

internal/driver/ioscompanion/devicerunner.go

@@ -211,6 +211,11 @@ func buildForTestingArgs(projectPath, derivedDataPath string, creds signingCrede
 		"-authenticationKeyPath", creds.authKeyPath,
 		"-authenticationKeyID", creds.authKeyID,
 		"-authenticationKeyIssuerID", creds.authIssuerID,
+		// companion/project.yml disables signing for the simulator build; the
+		// device install rejects an unsigned runner (0xe8008018), so signing is
+		// re-enabled here and the team drives automatic provisioning.
+		"CODE_SIGNING_ALLOWED=YES",
+		"CODE_SIGNING_REQUIRED=YES",
 		"CODE_SIGN_STYLE=Automatic",
 		"DEVELOPMENT_TEAM=" + creds.team,
 		"GENERATE_INFOPLIST_FILE=YES",

internal/driver/ioscompanion/devicerunner_test.go

@@ -21,6 +21,8 @@ func TestBuildForTestingArgs(t *testing.T) {
 		"-authenticationKeyPath /k/AuthKey.p8",
 		"-authenticationKeyID KID",
 		"-authenticationKeyIssuerID ISS",
+		"CODE_SIGNING_ALLOWED=YES",
+		"CODE_SIGNING_REQUIRED=YES",
 		"CODE_SIGN_STYLE=Automatic",
 		"DEVELOPMENT_TEAM=TEAM1",
 		"GENERATE_INFOPLIST_FILE=YES",