feat(mac): re-add MediaRemote entitlements to bypass macOS 14 restrictions

Users must run 'xattr -cr' to bypass Gatekeeper's 'damaged' warning when downloading the app, but this enables the app to read browser media playback state natively via MediaRemote.

Author: jayfunc

Mac/CarpeCast-Swift/CarpeCast.entitlements

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>com.apple.security.temporary-exception.mach-lookup.global-name</key>
+    <array>
+        <string>com.apple.mediaremoted.xpc</string>
+    </array>
+    <key>com.apple.security.automation.apple-events</key>
+    <true/>
+</dict>
+</plist>

Mac/build.sh

@@ -34,4 +34,8 @@ cp "$SRC_DIR/Info.plist" "$APP_BUNDLE/Contents/Info.plist"
 # Create PkgInfo
 echo -n "APPL????" > "$APP_BUNDLE/Contents/PkgInfo"
 
+# Code sign the app with ad-hoc signature and MediaRemote entitlements
+echo "Codesigning app with entitlements..."
+codesign --force --deep --sign - --entitlements "$SRC_DIR/CarpeCast.entitlements" "$APP_BUNDLE"
+
 echo "Build complete! App bundle created at $APP_BUNDLE"