ci: address PR review nits

- create-demo-env: route inputs through step env to avoid the documented
  Actions script-injection pattern. Same behavior; values arrive as
  environment variables instead of being textually substituted into the
  shell program.
- e2e.yml: rebase the iOS DerivedData cache key on inputs that exist at
  checkout time (manifest.json, ProjectVersion.txt, ProjectSettings.asset,
  com.onesignal.unity.{ios,core}/Editor/**, ExportOptions.plist) instead
  of the Unity-exported pbxproj/Podfile, which don't exist when the cache
  step runs and caused the key to collapse to a single global slot.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: fadi-george

.github/actions/create-demo-env/action.yml

@@ -17,9 +17,13 @@ runs:
     - name: Write .env
       working-directory: examples/demo
       shell: bash
+      env:
+        APP_ID: ${{ inputs.onesignal-app-id }}
+        API_KEY: ${{ inputs.onesignal-api-key }}
+        E2E_MODE: ${{ inputs.e2e-mode }}
       run: |
         {
-          echo "ONESIGNAL_APP_ID=${{ inputs.onesignal-app-id }}"
-          echo "ONESIGNAL_API_KEY=${{ inputs.onesignal-api-key }}"
-          echo "E2E_MODE=${{ inputs.e2e-mode }}"
+          echo "ONESIGNAL_APP_ID=$APP_ID"
+          echo "ONESIGNAL_API_KEY=$API_KEY"
+          echo "E2E_MODE=$E2E_MODE"
         } > .env

.github/workflows/e2e.yml

@@ -111,10 +111,14 @@ jobs:
           restore-keys: unity-library-ios-
 
       - name: Cache Xcode DerivedData
+        # Hash inputs to the Unity iOS export (files that exist at checkout
+        # time) rather than the exported Xcode project / Podfile, which
+        # don't exist until later steps run. Mirrors the Android Unity
+        # Library cache key shape above.
         uses: actions/cache@v5
         with:
           path: examples/demo/Build/iOS-DerivedData
-          key: deriveddata-${{ runner.os }}-${{ hashFiles('examples/demo/Build/iOS/Unity-iPhone.xcodeproj/project.pbxproj', 'examples/demo/Build/iOS/Podfile') }}
+          key: deriveddata-${{ runner.os }}-${{ hashFiles('examples/demo/Packages/manifest.json', 'examples/demo/ProjectSettings/ProjectVersion.txt', 'examples/demo/ProjectSettings/ProjectSettings.asset', 'com.onesignal.unity.ios/Editor/**', 'com.onesignal.unity.core/Editor/**', 'examples/demo/iOS/ExportOptions.plist') }}
           restore-keys: deriveddata-${{ runner.os }}-
 
       - name: Export Xcode project from Unity