mirror of
https://github.com/t8y2/dbx.git
synced 2026-10-19 16:16:45 +00:00
Sign and verify macOS MCP artifacts with a stable Developer ID requirement. Reject unsigned npm reruns, verify archive integrity, and clean up the isolated CI keychain on success or failure. Closes #10715