Repository navigation
Fix: Eliminate all keychain password prompts
Replaced legacy SecKeychainFindGenericPassword with SecItemCopyMatching in vault retrieval. The legacy API checked per-binary ACL and prompted for password on every recompile; the modern API respects the permissive kSecAttrAccess ACL — zero dialogs.
Users with old keychain items will be prompted once (migration), then never again.