e7af654b31
The osx-sign dependency accepts protobuf-like file lengths beyond its 512-byte sample and keeps allocating after EOF. That crashes the native macOS signing walk before codesign can finish. Pin the scanner used by osx-sign to the fixed version already in the build closure. Keep signature checks enabled. A real signing-walk test reproduces the allocation failure before the override and passes after it.