ClusterDeck v0.6.1

See CHANGELOG.md for details, including known limitations.

Downloads: aarch64 is for Apple Silicon Macs, x64 for Intel Macs.

Unsigned build (ad-hoc identity): there is no Apple Developer ID certificate for
this project yet, so macOS will show an "unidentified developer" warning on first
launch -- right-click the app and choose Open to run it anyway.

What ClusterDeck changes on your Mac: it asks for macOS permission before
touching anything outside ~/.clusterdeck/, and only ever writes inside a clearly
marked block it owns.

• Trusting a cluster's CA adds it to your login keychain (never System), scoped
  to the SSL/TLS policy only -- you'll see a macOS authorization prompt each time.
• /etc/hosts is only touched if you opt in per profile, inside one marked block per
  profile, via an admin-privileged prompt.
• Local DNS (opt in per profile) writes marked /etc/resolver/<zone> files via an
  admin-privileged prompt and runs a loopback-only responder as the user LaunchAgent
  com.clusterdeck.dns.
• ~/.ssh/config gets one Include ~/.clusterdeck/ssh/*.conf line; your own config
  is never edited directly.

See the README's "What ClusterDeck Changes on Your Mac" section for how to remove
everything it's added.