feat(engine): prepare Pilot native distribution

[tcballard]

Summary

• choose Pilot's local App Store rather than its hosted service-agent directory
• add native GitHub Release coverage for Linux arm64 and macOS amd64
• move the existing macOS arm64 build to the current macos-15 runner
• record the Pilot identity, local-first boundary, curated read-only surface, and release/install gates

Why this is a prerequisite

Pilot native apps require macOS and Linux assets on both amd64 and arm64. Core currently omits two of those four targets, so an app submission would be incomplete and unverifiable. The adapter submission follows after one immutable release contains all four assets and hashes.

Validation

• decided validate decisions: 440 valid, 0 invalid; OKF v0.2 conformant
• decided relationships decisions --validate: 2,642 checked, 0 issues
• decided sentry decisions --base origin/main: 0 violations
• workflow YAML parsed locally
• git diff --check: passed

Follow-up after merge and release

Use Pilot's official pilot-app generator to create io.pilot.asdecided, pin all four release asset hashes, expose only help/retrieve/validate/relationships, verify the signed bundle, and prove install + retrieval on a real Pilot node before catalogue submission.

Authored under my direction with Codex.