auth settings: Put Apple "Team ID" before the things it namespaces.

I believe the Bundle ID (aka App ID) and Services ID have meaning only
relative to a specific Team ID.  In particular, in some places in the
developer.apple.com UI, they're displayed in a fully-qualified form
like "ABCDE12345.com.example.app", where "com.example.app" is the
App ID or Services ID and ABCDE12345 is the Team ID.

docs/production/authentication-methods.md

@@ -597,10 +597,11 @@ domain for your server).
    ```
 
 1. Configure the "Apple authentication" section of
-  `/etc/zulip/settings.py`.  Use the "Services ID" as
+  `/etc/zulip/settings.py`.  Use the "Team ID" as
+  `SOCIAL_AUTH_APPLE_TEAM`, "Services ID" as
   `SOCIAL_AUTH_APPLE_SERVICES_ID`, "Bundle ID" as
-  `SOCIAL_AUTH_APPLE_BUNDLE_ID`, "Key ID" as `SOCIAL_AUTH_APPLE_KEY`
-  and "Team ID" as `SOCIAL_AUTH_APPLE_TEAM` in `settings.py` file.
+  `SOCIAL_AUTH_APPLE_BUNDLE_ID`, and "Key ID" as
+  `SOCIAL_AUTH_APPLE_KEY`.
 
 1. In the Apple developer site, configure the domains your Zulip
    server uses when sending outgoing email notifications.  (This is

zproject/prod_settings_template.py

@@ -292,9 +292,9 @@
 #
 #     https://zulip.readthedocs.io/en/latest/production/authentication-methods.html#sign-in-with-apple
 #
+#SOCIAL_AUTH_APPLE_TEAM = "<your Team ID>"
 #SOCIAL_AUTH_APPLE_SERVICES_ID = "<your Services ID>"
 #SOCIAL_AUTH_APPLE_BUNDLE_ID = "<your Bundle ID>"
-#SOCIAL_AUTH_APPLE_TEAM = "<your Team ID>"
 #SOCIAL_AUTH_APPLE_KEY = "<your Key ID>"
 
 ########