fix(ios,macos): preserve Silero @_cdecl exports across Xcode Archive

The Apple CoreML Silero VAD backend resolves six @_cdecl Swift symbols
via dlsym(RTLD_DEFAULT) at runtime in the Rust audio crate. Local
flutter build paths preserved those symbols, but Xcode Archive (the
path used for TestFlight and App Store uploads) silently stripped them
through two independent mechanisms, causing Rust to fall back to
WebRTC VAD on every shipped build.

Both stripping mechanisms are now neutralised:

* ld dead-strip: OTHER_LDFLAGS now whitelists each of the six
  chanora_silero_vad_* symbols via repeated `-Xlinker -exported_symbol`
  pairs in ios/Flutter/{Release,Debug}.xcconfig and
  macos/Flutter/Flutter-{Release,Debug}.xcconfig.
* install-time strip: STRIP_STYLE is set to `non-global` in the same
  four xcconfigs so the post-link strip phase no longer drops exported
  global text symbols from the Archive product. Cost: ~264 bytes per
  binary; verified `xcrun strip` vs `xcrun strip -x` behaviour.

Self-test wired into both AppDelegates: at launch on a utility queue,
ChanoraSileroSelfTest resolves all six symbols through dlsym (the same
path the Rust runtime uses, not a direct call that would mask the bug
class) and exercises create → reset → process → destroy. Result is
logged via NSLog and surfaces in Console.app / idevicesyslog.

A post-link verify_silero_exports.sh build phase runs nm -gU on the
final Archive binary and fails the build if any of the six symbols are
missing. Empirically caught the original Archive regression that
flutter build --no-codesign did not.

CocoaPods bridge podspecs now emit a proper .dSYM via dsymutil so
TestFlight crash reports are symbolicated; Cargo.toml release profile
sets `debug = true` because dsymutil needs DWARF in the input dylib.

macOS chanora_bridge.podspec PATH inserts /opt/homebrew/opt/rustup/bin
ahead of /opt/homebrew/bin so rustup's cargo (which has the
x86_64-apple-darwin target installed) wins over the homebrew rust
formula that is aarch64-only.

iOS Podfile target renamed from `Runner` to `Chanora` to match the
Xcode target name shipped in the project (the workspace and scheme
already referenced Chanora; the Podfile mismatch produced lint
warnings during `pod install`).

ITSAppUsesNonExemptEncryption=false declared in both Info.plist files
so TestFlight and App Store Connect uploads skip the export-compliance
prompt; Chanora uses only platform-provided TLS.

.gitignore now covers Xcode archive bundles, IPA exports, dSYM
directories, the local macOS release zip, and agent/tooling state
directories so generated TestFlight artifacts no longer appear in
git status.

End-to-end verified by headless archive:
  xcodebuild -workspace Runner.xcworkspace -scheme Runner \
    -configuration Release -destination 'generic/platform=iOS' \
    -archivePath /tmp/chanora.xcarchive archive CODE_SIGNING_ALLOWED=NO
nm -gU on the resulting .app/Chanora binary shows all six
chanora_silero_vad_* symbols present.

apps/chanora_flutter/ios/chanora_bridge.podspec

@@ -85,6 +85,13 @@ Pod::Spec.new do |s|
     }
     CARGO_BIN="$(find_cargo)"
     RUSTC_BIN="$(find_rustc)"
+
+    # Prepend Homebrew's bin dir to PATH so `cmake` (used by
+    # audiopus_sys's libopus source build) is found. Xcode's
+    # script_phase PATH sanitisation strips /opt/homebrew/bin,
+    # which on Apple Silicon hosts is where Homebrew tools live.
+    export PATH="/opt/homebrew/bin:$PATH"
+
     echo "[chanora_bridge.podspec] cargo build aarch64-apple-ios"
     cd "$REPO_ROOT"
     HOME="$USER_HOME" \\
@@ -129,7 +136,21 @@ PLIST
 
     install_name_tool -id "@rpath/chanora_bridge.framework/chanora_bridge" \\
                       "$FW/chanora_bridge"
-    echo "[chanora_bridge.podspec] framework ready at $FW"
+
+    # Generate the framework's dSYM bundle. Apple's archive validator
+    # rejects uploads when an embedded framework has no matching dSYM
+    # (UUID lookup miss in the archive's dSYMs/ folder), which is the
+    # failure mode that produced this prepare_command in the first
+    # place. dsymutil reads the DWARF that cargo emitted (enabled by
+    # [profile.release] debug = true at the workspace root) and writes
+    # chanora_bridge.framework.dSYM next to the framework. We then
+    # strip the in-framework binary so the shipped app stays slim —
+    # the symbols live exclusively in the dSYM bundle, which is the
+    # layout xcodebuild -exportArchive and App Store Connect expect.
+    rm -rf "$FW.dSYM"
+    xcrun dsymutil "$FW/chanora_bridge" -o "$FW.dSYM"
+    xcrun strip -S -x "$FW/chanora_bridge"
+    echo "[chanora_bridge.podspec] framework + dSYM ready at $FW"
   SCRIPT
 
   # Pod CocoaPods picks this up; the framework gets embedded into
@@ -185,6 +206,13 @@ PLIST
       }
       CARGO_BIN="$(find_cargo)"
       RUSTC_BIN="$(find_rustc)"
+
+      # Prepend Homebrew's bin dir to PATH so `cmake` (used by
+      # audiopus_sys's libopus source build) is found. Xcode's
+      # script_phase PATH sanitisation strips /opt/homebrew/bin,
+      # which on Apple Silicon hosts is where Homebrew tools live.
+      export PATH="/opt/homebrew/bin:$PATH"
+
       if [ "${PLATFORM_NAME:-iphoneos}" = "iphonesimulator" ]; then
         RUST_TARGET="aarch64-apple-ios-sim"
         SUPPORTED_PLATFORM="iPhoneSimulator"
@@ -210,15 +238,19 @@ PLIST
 
       # Skip the wrap step if the framework's binary is already
       # up-to-date with the cargo output (fast no-op on incremental
-      # builds where Rust didn't change).
+      # builds where Rust didn't change). We still publish the dSYM
+      # into DWARF_DSYM_FOLDER_PATH below so archive builds always
+      # have the symbols, even when the framework itself is cached.
+      FW_UP_TO_DATE=0
       if [ -f "$FW/chanora_bridge" ] && [ "$FW/chanora_bridge" -nt "$BRIDGE" ]; then
         echo "[chanora_bridge script_phase] framework already up-to-date"
-        exit 0
+        FW_UP_TO_DATE=1
       fi
 
-      mkdir -p "$FW"
-      cp "$BRIDGE" "$FW/chanora_bridge"
-      cat > "$FW/Info.plist" <<PLIST
+      if [ "$FW_UP_TO_DATE" = 0 ]; then
+        mkdir -p "$FW"
+        cp "$BRIDGE" "$FW/chanora_bridge"
+        cat > "$FW/Info.plist" <<PLIST
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -234,9 +266,28 @@ PLIST
 </dict>
 </plist>
 PLIST
-      install_name_tool -id "@rpath/chanora_bridge.framework/chanora_bridge" \\
-                        "$FW/chanora_bridge"
-      echo "[chanora_bridge script_phase] framework refreshed"
+        install_name_tool -id "@rpath/chanora_bridge.framework/chanora_bridge" \\
+                          "$FW/chanora_bridge"
+        rm -rf "$FW.dSYM"
+        xcrun dsymutil "$FW/chanora_bridge" -o "$FW.dSYM"
+        xcrun strip -S -x "$FW/chanora_bridge"
+        echo "[chanora_bridge script_phase] framework refreshed (with dSYM)"
+      fi
+
+      # Publish the dSYM into Xcode's archive dSYM folder on every
+      # build (cached or not). Without this the archive validator
+      # fails with "archive did not include a dSYM for the
+      # chanora_bridge.framework with the UUIDs [<uuid>]" and the
+      # IPA cannot be uploaded to App Store Connect / TestFlight.
+      # ${DWARF_DSYM_FOLDER_PATH} resolves to <ARCHIVE>/dSYMs for
+      # archive builds and <BUILT_PRODUCTS_DIR> otherwise; both paths
+      # are the ones xcodebuild scans when collecting symbols.
+      if [ -n "${DWARF_DSYM_FOLDER_PATH:-}" ] && [ -d "$FW.dSYM" ]; then
+        mkdir -p "$DWARF_DSYM_FOLDER_PATH"
+        rm -rf "$DWARF_DSYM_FOLDER_PATH/chanora_bridge.framework.dSYM"
+        cp -R "$FW.dSYM" "$DWARF_DSYM_FOLDER_PATH/chanora_bridge.framework.dSYM"
+        echo "[chanora_bridge script_phase] dSYM published to $DWARF_DSYM_FOLDER_PATH"
+      fi
     SCRIPT
     :execution_position => :before_compile,
   }