aps-environment $(OPENCLAW_APNS_ENTITLEMENT_ENVIRONMENT) com.apple.developer.devicecheck.appattest-environment $(OPENCLAW_APP_ATTEST_ENVIRONMENT) com.apple.security.application-groups $(OPENCLAW_APP_GROUP_ID)