4.1.0
* Add Sigstore TUF trust foundation * Verify GitHub Actions provenance before mounting updates * Release AppUpdater 4.1.0 * Address attestation review findings * Add live attestation smoke test * Match smoke app executable identity * Exclude live smoke script from test target