feat: add Apple Sign-In support to ory_social_provider resource

[KT-Doan]

Description

Add Apple Sign-In support to the ory_social_provider resource. Apple uses a non-standard OAuth2 flow where Ory generates the JWT client_secret from Apple-specific fields (apple_team_id, apple_private_key_id, apple_private_key) instead of requiring a static secret.

Key changes:

• Add apple_team_id, apple_private_key_id, and apple_private_key attributes
• Make client_secret optional (not needed for Apple providers)
• Add ValidateConfig with rules ensuring correct attribute combinations per provider type
• Update buildProviderConfig and Read to handle Apple-specific fields

Related Issues

Fixes #80

Type of Change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update

Checklist

• I have read the CONTRIBUTING guide
• My code follows the existing code style
• I have added tests that prove my fix/feature works
• I have updated documentation as needed
• All new and existing tests pass (make test)
• I have run the linter (make format)

Testing

Describe how you tested these changes:

• Unit tests
• Acceptance tests (TestAccSocialProviderResource_basic, TestAccSocialProviderResource_apple)
• Manual testing (plan, apply, drift detection, import, update, destroy)

Screenshots/Output

Terraform plan output for Apple provider:

# ory_social_provider.apple will be created
+ resource "ory_social_provider" "apple" {
    + apple_private_key    = (sensitive value)
    + apple_private_key_id = "ABC123DEF4"
    + apple_team_id        = "TEAMID1234"
    + client_id            = "com.example.signin"
    + id                   = (known after apply)
    + label                = "Apple"
    + project_id           = "..."
    + provider             = "apple"
    + scopes               = ["email", "name"]
  }

[Copilot]

Pull request overview

Adds first-class Apple Sign-In support to the ory_social_provider Terraform resource by extending the schema/config payload, documenting Apple’s credential requirements, and adding acceptance coverage for Apple create/import/update.

Changes:

• Extends ory_social_provider with apple_team_id, apple_private_key_id, and apple_private_key, and makes client_secret optional (Apple-specific).
• Adds resource-level ValidateConfig to enforce valid attribute combinations per provider_type.
• Updates docs/examples and adds acceptance tests + testdata templates for Apple provider flows.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
templates/resources/social_provider.md.tmpl	Documents Apple Sign-In behavior and constraints in the resource template.
internal/resources/socialprovider/testdata/apple_basic.tf.tmpl	Adds Apple acceptance test config (create).
internal/resources/socialprovider/testdata/apple_updated.tf.tmpl	Adds Apple acceptance test config (update).
internal/resources/socialprovider/resource_test.go	Adds acceptance test coverage for Apple create/import/update.
internal/resources/socialprovider/resource.go	Implements Apple attributes, optional client_secret, config validation, and API payload/state handling.
examples/resources/ory_social_provider/resource.tf	Updates example configuration to use Apple-specific credentials and new variables.
docs/resources/social_provider.md	Generated docs updates for Apple Sign-In fields and semantics.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Demonsthere]

lgtm!