refactor(cli): harden macOS signature checks per #5675 review#5683

avallete merged 2 commits into

developsupabase/cli:developfrom

claude/macos-signing-review-followupssupabase/cli:claude/macos-signing-review-followupsCopy head branch name to clipboard