[codex] Publish focused Apple APNs rules

[KuGouGo]

Summary

• narrow the APNs domain collection to the official *.push.apple.com suffix and focused bootstrap aliases
• remove the broad akadns.net and generic Apple EdgeKey matches
• add the nine narrow APNs IPv4/IPv6 ranges published by Apple
• generate dedicated domain/apple-apns and ip/apple-apns artifacts across supported platforms

Why

The generic ip/apple collection covers all Apple address space and is too broad for an APNs-only policy. The previous akadns.net suffix also matched unrelated Akamai services. Dedicated narrow domain and IP collections let clients route APNs without proxying unrelated Apple or CDN traffic.

Validation

• make lint-rules
• make preflight (25/25 tests passed)
• compiled and decompiled both rule sets with sing-box 1.14.0-alpha.44 and verified the resulting domains and CIDRs

Sources

• Apple service domains: https://support.apple.com/en-us/101555
• Apple APNs network ranges: https://support.apple.com/en-us/102266
• bootstrap aliases supplied by the repository owner