v0.1.2
release: sign and notarize macOS binaries (v0.1.2) The macOS release binaries were only ad-hoc/linker-signed, not notarized with a real Developer ID — Gatekeeper kills them (SIGKILL) on real user machines, confirmed via a teammate's install. Wire codesign + notarytool into the macOS matrix jobs. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>