aps-environment $(OPENCLAW_APNS_ENTITLEMENT_ENVIRONMENT) com.apple.security.application-groups $(OPENCLAW_ACTIVE_APP_GROUP_ID)