xcodebuild ignored sigh's downloaded provisioning profile because the Xcode project's signing style is Automatic, which needs an interactive Apple ID session unavailable in headless CI. Override at build time via xcargs instead of changing the checked-in project signing settings.