Add local iOS release pipeline, fix shortcuts, and improve invoice UX.

Enable App Store builds without EAS, iOS 18 App Intents plugins, and signing
fixes for distribution export. Add mobile invoice PDF preview, compact line
items, and more reliable shortcut deep-link handling.

Co-authored-by: Cursor <cursoragent@cursor.com>

contexts/AppLockContext.tsx

@@ -22,6 +22,7 @@ import {
   setBiometricEnabled,
   setStoredPin,
 } from "@/lib/app-lock";
+import { hasPendingShortcut } from "@/lib/shortcut-queue";
 
 type AppLockContextValue = {
   enabled: boolean;
@@ -68,7 +69,7 @@ export function AppLockProvider({ children }: { children: ReactNode }) {
     const accountId = activeAccountId;
 
     async function hydrate() {
-      const [lockEnabled, pin, bioEnabled, hasHardware, isEnrolled, authTypes] =
+      const [lockEnabled, pin, bioEnabled, hasHardware, isEnrolled, authTypes, shortcutPending] =
         await Promise.all([
           getAppLockEnabled(accountId),
           getStoredPin(accountId),
@@ -76,6 +77,7 @@ export function AppLockProvider({ children }: { children: ReactNode }) {
           LocalAuthentication.hasHardwareAsync(),
           LocalAuthentication.isEnrolledAsync(),
           LocalAuthentication.supportedAuthenticationTypesAsync(),
+          hasPendingShortcut(),
         ]);
 
       if (cancelled) return;
@@ -92,7 +94,7 @@ export function AppLockProvider({ children }: { children: ReactNode }) {
             ? "Touch ID"
             : "Biometrics",
       );
-      setIsLocked(lockEnabled);
+      setIsLocked(lockEnabled && !shortcutPending);
       hydrated.current = true;
     }