#4224 feat(limrun): replace iOS AX automation with the shared XCTest runner

Summary

Replace Limrun iOS AX automation with the native agent-device XCTest runner through Limrun HTTP forwarding. Snapshots, interactions and Apple operations use shared execution paths; commands such as agent-device snapshot -i stay unchanged.

Following #4213, this 140-file replacement has two commits: shared prerequisites, then the provider switch and AX deletion. Keeping the switch and deletion together avoids a temporary mixed backend. Scope also includes the Revyl screenshot cancellation test and physical-iPhone replay adjustment. Local app sync follows in #4225.

Validation

Tested 7e18ad0a6fcdb4b677df5b94602afddaaf8fedcb: pnpm check:affected --run --head HEAD passes with exactCommit: true, including 17,297 unit tests, provider integration and compatibility checks. Public evidence includes the regression comparison against 442a6ce, independent review, and release-runner builds with Xcode 26.4/27.1. The prerequisite commit independently builds and typechecks; earlier full-gate evidence remains attributed to its original SHA.

The packaged 26.4 runner, including verified Testing overlays, passed three connections to one Limrun simulator: 21 snapshot nodes and live foreground state each time. Persistent slot conflicts and sparse captures retain typed recovery errors. Intermittent XCTest capture stalls remain possible; their underlying cause is not claimed fixed. GitHub-owned device/coverage lanes remain CI obligations. No fresh physical-phone run is claimed.

---

^{Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.}