fix(macos): codesign KDF with hardened runtime and timestamp#240

Draft

CharlVS wants to merge 3 commits into

devfrom

fix/kdf-signing

Commits on Oct 15, 2025

fix(macos): codesign KDF binary in all configs; keep Release re-sign after thinning
CharlVS
committed
fix(macos): timestamped codesigning with hardened runtime for KDF binary and dylib
CharlVS
committed
fix(macos): refactor codesign helper, fix error newlines, avoid Release double-signing\n\n- Extracted kdf_codesign helper to reduce duplication\n- Use printf for proper newline formatting\n- Sign i…
CharlVS
committed