fix(mobile): use product IDs for Apple IAP verification