App Attest plus DeviceCheck: iOS identity for revocable enrollment

App Attest proves the binary, DeviceCheck persists two bits across reinstalls. How EnclaveVault wires them together for revocable enrollment.