- Add entitlements.plist for Developer ID hardened runtime (JIT,
unsigned memory, library validation, network client)
- Reference entitlements in tauri.conf.json bundle.macOS
- Guard get_install_type() with early mobile return (avoids
std::process::Command in iOS binary)
- Add cfg(mobile) no-op branch to xdg_open()
