[release/13.2] Backport PR #16053: Fix macOS signing, permissions, cert trust, and CI verification#16215

Merged

joperezr merged 9 commits into

release/13.2from

copilot/backport-pr-16053-release-13-2

Apr 15, 2026

Commits on Apr 15, 2026

Add macOS JIT entitlements and ad-hoc codesign step for aspire-managed

radical
and
joperezr
authored
Restore execute permissions on aspire-managed after MicroBuild signing

radical
and
joperezr
authored
Narrow non-interactive cert trust skip to macOS and Windows only

Copilot
and
joperezr
authored
Add CLI archive verification scripts

radical
and
joperezr
authored
Wire CLI archive verification into CI pipelines

radical
and
joperezr
authored
Address PR feedback: restore testability and fix scripts

radical
and
joperezr
authored
Add EnsureHttpCertificateExists to shared TestCertificateToolRunner

Copilot
and
joperezr
authored
Remove non-entitlement changes from backport

joperezr
and
Copilot
committed
Add CI verification scripts for signed CLI archives

joperezr
and
Copilot
committed