Signed builds run under the hardened runtime, where wasmtime needs JIT and unsigned executable memory to compile plugins. Also set the minimum macOS version to 11.0. Claude-Session: https://claude.ai/code/session_01B65qLEKnkeYTGdbwhLpjCu
