v1.4.129-rc.7

What's Changed

• onboarding: seamless macOS notification permission step with live state detection by @nwparker in #7684
• test(terminal): skip reattach mouse-leak e2e when PTY shell can't exec by @AmethystLiang in #7895
• fix(updater): restore Windows update signature verification by @brennanb2025 in #7861
• Sign Windows inner binaries during release (fail-open two-request SignPath flow) by @Jinwoo-H in #7866

Full Changelog: v1.4.129-rc.6...v1.4.129-rc.7