fat: Support Apple app run and Swift Testing bundles

Summary

• Adds generic rule-declared uncacheable actions so launch side effects bypass action-cache replay while Rust stays toolchain-agnostic.
• Implements Apple app run for macOS and iOS simulators, and compiles Swift Testing tests into .xctest bundles with dependency wiring.
• Adds MCP once_build_target and once_run_target behind --allow-run.
• Updates Blick to Fireworks Kimi K2.7 Code.

Testing

• mise exec -- cargo fmt --all
• mise exec -- cargo test -p once-frontend -p once-cli
• mise exec -- cargo build --release -p once-cli && mise exec -- shellspec spec/apple_spec.sh
• MCP tools/list smoke checks with and without --allow-run
• git diff --check

No GitHub comments yet.