Add provisioning profiles to the signing crate and the CLI

[setoelkahfi]

No description provided.

[sigit-code]

Adds provisioning profile support to the signing crate (crates/signing/src/profile.rs) with a ProfilesApi trait covering list/get-content/create/delete, plus ProfileType/ProfileState enums and create relationship builders that correctly omit devices for store profiles. The frontend crate gains profiles.rs with a ProfileSummary that deliberately excludes profileContent and a download_profile helper. The CLI gets a profiles subcommand tree with a CliProfileType mapping. Also adds a SERVICES bundle-id platform variant and a limit=200 on bundle-id listing to fix silent truncation and deserialization failures. A ToMany relationship type is added to core jsonapi.

Reviewers should confirm the takes_devices list matches Apple's actual device-scoped types (notably MacCatalystAppStore vs development) and check the enterprise create flow, since in-house/store types drop devices silently at the builder level but the CLI only warns based on takes_devices.

---

Automated review by siGit Code Review · commit 78d9eff