First Developer ID signed and notarized macOS build — no more Gatekeeper 'Open Anyway' detour. Also fixes a mediapipe/Metal crash in face scoring on Apple Silicon (mediapipe pinned <1.0).
SHA-256: 5c3d906e3ba9624fa4aa8afe4c98d9fe4e2b29cacdcf183db8a7da002e49f979