WebJam v0.28.4 — unsigned private test candidate.

Warning

This is an unsigned private test candidate, not a production-trusted release.
Windows packages are unsigned. macOS packages are ad-hoc signed and are not
notarized or reviewed by Apple. Physical audio, hardware, Gatekeeper,
SmartScreen, signing, and notarization gates remain NOT RUN unless the
release notes explicitly record otherwise.

Security remediation: this candidate upgrades cryptography to 50.0.0,
fixing CVE-2026-69247, CVE-2026-69248, and CVE-2026-69249. Windows,
Linux, and Apple-silicon macOS use upstream binary wheels. Because
upstream removed Intel macOS wheels, that package uses WebJam's documented,
hash-locked native x86_64 source-build path with static OpenSSL 3.5.7 LTS.

The macOS DMGs and ZIPs include a guided installer plus a separately labeled
advanced helper that removes quarantine from the installed WebJam app only.
They also include a self-contained Pocket Stage iPhone Setup Xcode project;
an Apple ID with a free Personal Team is sufficient for owner-device testing.
Jamulus managed updates require a separate signed, expiring component catalog
that exactly authorizes this WebJam version. If no compatible catalog exists,
WebJam rejects the catalog and keeps the reviewed embedded Jamulus 3.12.2
fallback. Platform approval is explicit, and updates never interrupt an active
Jamulus lifecycle. Verify the attached SHA-256 manifest before installing.

What's Changed

• Integrate the show wave and keep Help usable on compact screens by @rupret007 in #154
• Document the WebJam show arc and presenter rehearsal by @rupret007 in #152
• Keep compact Studio controls and Art next steps readable by @rupret007 in #149
• Fix Art Help routing and clarify Music project doors by @rupret007 in #153
• feat: Add Send to Logic button with adapter for take handoff by @rupret007 in #155
• release: prepare unsigned v0.28.4 candidate by @rupret007 in #156

Full Changelog: v0.28.3...v0.28.4