MANUAL RUN: eqosys Sign in with Apple keys and App Review accounts #2898

About 30 minutes. Part of #2875, follows the eqosys PR for #2879.

1. In the Apple developer account make a Services ID, enable Sign in with Apple, set the return URL to https://eqosys.qntbr.com/api/auth/callback/apple, and make a key (.p8).
2. bun apps/eqosys/scripts/apple-secret.ts <teamId> <keyId> <servicesId> < AuthKey.p8 prints the client secret (good six months: renew it).
3. Put them in 1Password (eqosys vault, item apple, built-in password field per value) and add the three APPLE_* secret bindings to apps/eqosys/rustybuns.config.ts with .env.schema, then deploy.
4. For each iOS app: bun apps/eqosys/scripts/review-account.ts <appId> <email> <password>, and put those in App Store Connect's review notes.