af33d4bfe4
- Added macOS CI signing and notarization steps when APPLE_* secrets are configured. - Added strict darwin verification checks to reject ad-hoc signatures and run smoke tests. - Added Homebrew formula publishing from release assets with SHA-256 checksums. - Added helper scripts for signing secret upload, entitlements, and release workflows.