Reapply: migrate app identity to Codevisor, LLC (com.codevisor.*)

[dylanplayer]

DO NOT MERGE until the Codevisor, LLC Apple Developer account is reinstated

This reapplies the identity migration (64a0a6fa, reverted in 5211b6e4 after Apple locked the LLC developer account during first-submission notarization review).

Merge checklist — in this exact order

1. ☐ Apple reinstates the Codevisor, LLC membership (Team MZ3V94JW6W) — reinstatement request pending
2. ☐ New Developer ID Application cert issued (the old one was revoked; Alex must create it, CSR → p12 → 851 vault)
3. ☐ New App Store Connect API key if the old one (H9W4TASGB8) was invalidated by the lock
4. ☐ Swap CI secrets to the LLC identity (mapping documented in the 1Password items in the 851 vault): APPLE_CERTIFICATE_BASE64, APPLE_CERTIFICATE_PASSWORD, APPLE_CODESIGN_IDENTITY, APPLE_TEAM_ID, APP_STORE_CONNECT_API_KEY_BASE64, APP_STORE_CONNECT_API_KEY_ID, APP_STORE_CONNECT_ISSUER_ID. Never touch SPARKLE_PRIVATE_KEY.
5. ☐ Merge this PR — the next alpha ships the migration
6. ☐ Alpha soak → cut stable

What it does (unchanged from the original, previously green on all tests + builds)

• Bundle IDs → com.codevisor.macos / com.codevisor.macos.dev.<hash> / com.codevisor.ios
• One-time migration for existing installs: defaults domain adoption, launch agent rename + legacy unregister/boot-out, Homebrew + install.sh dual-identity quit
• Logger subsystem → com.codevisor; iOS CFBundleURLName derived from PRODUCT_BUNDLE_IDENTIFIER
• Sparkle feed URLs and EdDSA keys deliberately untouched — the EdDSA chain is what carries existing installs across the team change in one hop

Why merging early is harmful

Merging before the secret swap ships renamed bundle IDs under the personal signature — users' TCC grants reset twice (once at merge, again at the real identity change).

🤖 Generated with Claude Code