Allow passing provisioning profile from command line

We don't want to hardcode a team ID or other provisioning profile details in our build files. We use `rules_apple` for an open source project (MapLibre Native) and we want everyone to be able to build the project without having to edit the build files first.

It would be helpful if a provisioning profile could be supplied from the command line for this.

The issue names no files, tests, or entry points. Start by tracing how rules_apple currently obtains provisioning profile details, then verify the command-line value can be supplied without editing build files and that the existing build still works.

Written by the indexing model from the issue text.