fix: use PROVISIONING_PROFILE with UUID and -allowProvisioningUpdates flag

justfile

@@ -130,8 +130,8 @@ ios-test: ios-gen ios-resolve
 # Archive a signed Release build (requires valid signing identity in keychain).
 # Output: {{runner_temp}}/LibNovel.xcarchive
 # Typically called from CI after importing certificate + provisioning profile.
-# Usage: just ios-archive <team-id> <profile-name>
-ios-archive team_id profile_name: ios-gen ios-resolve
+# Usage: just ios-archive <team-id> <profile-uuid>
+ios-archive team_id profile_uuid: ios-gen ios-resolve
     cd {{ios_dir}} && xcodebuild archive \
         -project {{ios_scheme}}.xcodeproj \
         -scheme {{ios_scheme}} \
@@ -139,10 +139,11 @@ ios-archive team_id profile_name: ios-gen ios-resolve
         -destination 'generic/platform=iOS' \
         -clonedSourcePackagesDirPath {{ios_spm}} \
         -archivePath {{runner_temp}}/LibNovel.xcarchive \
+        -allowProvisioningUpdates \
         CODE_SIGN_STYLE=Manual \
         CODE_SIGN_IDENTITY="Apple Distribution" \
         DEVELOPMENT_TEAM="{{team_id}}" \
-        PROVISIONING_PROFILE_SPECIFIER="{{profile_name}}"
+        PROVISIONING_PROFILE="{{profile_uuid}}"
 
 # Export an IPA from the archive produced by ios-archive.
 # Requires ios/LibNovel/ExportOptions.plist.