Move DEVELOPMENT_TEAM and provisioning settings out of project.pbxproj
into a gitignored Local.xcconfig, so contributor signing configs are
never accidentally committed. Add Local.xcconfig.example as a template,
CONTRIBUTING.md with setup instructions, and a GitHub Actions workflow
that fails any PR modifying signing settings in project.pbxproj.
