touchid-agent v0.5.0

touchid-agent v0.5.0

macOS SSH agent backed by the Secure Enclave and Touch ID. Drop-in
replacement for yubikey-agent.

Changes since v0.4.0

• fix: unblock go vet on managed_darwin null check
• fix: ship allowed_callers in mobileconfig + verify payload at release
• test: add verify-managed-prefs.sh for Track #2 §3 validation
• feat: managed preferences read path + mobileconfig profile (Track #2 §3)
• docs: reposition README around fleet/security differentiation
• docs: mark Track #2 partial, queue config-profile + deployment doc

Verifying this release

```
shasum -a 256 -c touchid-agent-VERSION-darwin-universal.tar.gz.sha256
```

The binary is signed with a Developer ID certificate and notarized by Apple.
Gatekeeper validates the notarization ticket online on first launch (flat
Mach-O CLI binaries cannot be stapled).

Installing

```
tar -xzf touchid-agent-VERSION-darwin-universal.tar.gz
sudo install -m 755 touchid-agent /usr/local/bin/
```

See README.md for SSH config and launchd setup.