Merge main into identity_verification_beta (up to pre-#1667)

Brings in main commits up to ae58bad (#1664 E2E workflow). Tree
content mirrors the validated state of identity_verification_rebase_on_5.5.1,
which has been tested end-to-end. Main's last 3 PRs (#1667 OneSignalIdentifiers
refactor, #1669 prewarm fix, #1670 release 5.5.2) are intentionally not
included — they require manual integration with the JWT branch's APIs
and will land as separate PRs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: nan-li

.github/actions/setup-demo/action.yml

@@ -0,0 +1,35 @@
+name: 'Setup Demo'
+description: 'Installs XcodeGen, generates the demo Xcode project, and creates Secrets.plist for Appium E2E'
+inputs:
+  onesignal-app-id:
+    description: 'OneSignal App ID for the demo Secrets.plist'
+    required: true
+  onesignal-api-key:
+    description: 'OneSignal API Key for the demo Secrets.plist'
+    required: true
+runs:
+  using: 'composite'
+  steps:
+    - name: Install XcodeGen
+      shell: bash
+      run: brew install xcodegen
+
+    - name: Create Secrets.plist
+      shell: bash
+      working-directory: examples/demo
+      env:
+        APP_ID: ${{ inputs.onesignal-app-id }}
+        API_KEY: ${{ inputs.onesignal-api-key }}
+      run: |
+        python3 - <<'PY'
+        import os, plistlib, pathlib
+        pathlib.Path('App/Secrets.plist').write_bytes(plistlib.dumps({
+            'ONESIGNAL_APP_ID': os.environ['APP_ID'],
+            'ONESIGNAL_API_KEY': os.environ['API_KEY'],
+        }))
+        PY
+
+    - name: Generate Xcode project
+      shell: bash
+      working-directory: examples/demo
+      run: xcodegen generate

.github/os_probot_metadata.js

@@ -16,7 +16,7 @@ jobs:
     steps:
       - name: Select Xcode Version
         run: |
-          sudo xcode-select -s /Applications/Xcode_15.2.app
+          sudo xcode-select -s /Applications/Xcode_16.4.0.app
       - name: Checkout OneSignal-iOS-SDK
         uses: actions/checkout@v3
       - name: Set Default Scheme