a6279e0730
Rolled back binary updater replacements when post-install version verification fails instead of deleting the previous working binary first. Added a release workflow gate that downloads the published macOS arm64 asset and verifies codesign plus --version before npm publishing. Fixes #1240