agentcookie v1.2.2

Bug-fix release for headless sinks, signed builds, and installer re-runs.

• Headless sinks no longer show a Chrome Safe Storage Keychain dialog every sync. With skip_chrome_sqlite: true, the sink, agentcookie cookies --domain, and doctor never read Chrome Safe Storage. Reported by @ericxyz86 (#137).
• Signed binaries carry the Apple Events entitlement, so chromectl can quit Chrome politely, and an unanswered Automation prompt can no longer stall a sync. Based on #135 by @CedricKhuaYanHan.
• Re-running install-beta.sh on a working machine upgrades in place: it restarts the daemon on the new binary without re-running pairing, and a new --repair flag forces a fresh pairing. Based on #134 by @chronicgiardia, who also filed #132.
• Built with Go 1.26.9, which fixes standard library vulnerabilities GO-2026-6603 through GO-2026-6617.

Thanks to @CedricKhuaYanHan, @chronicgiardia, and @ericxyz86.

What's Changed

• fix(sink): never read Chrome Safe Storage when skip_chrome_sqlite is set by @mvanhorn in #138
• fix(sign): grant and verify the Apple Events entitlement, bound the Chrome quit by @mvanhorn in #139
• fix(install): upgrade in place on re-run instead of re-running the wizard by @mvanhorn in #140

Full Changelog: v1.2.1...v1.2.2