pdfcer v0.37.0 — at-own-risk Acrobat trust-store setting

pdfcer v0.37.0 — Pass 10.4: persistent "use Acrobat trust store (at your own risk)" setting

A real setting for the signature-trust feature, so it isn't only a per-run flag.

• settings::AcrobatTrustStore { Off, AtOwnRisk }, default Off. When set to
  at_own_risk, verify-signatures reads an installed Acrobat/Reader's
  downloaded trust store to evaluate signer trust; the flag --trust-from-acrobat
  still forces it on for a single run.
• The token spells "at own risk" and the settings file carries a disclosure
  comment, so the consent is explicit and off by default — the EULA question is
  resolved by the operator's opt-in, not a pdfcer legal determination.

Trust remains a signature-chain check only (revocation, validity dates and CA
constraints are a later increment); the GUI binds this setting for its security
tab.

Portable download

pdfcer-v0.37.0-windows-x64.zip — Windows 10/11 x86_64, single folder, no
installer. Verify with the .sha256 sidecar.