Merge origin/main into feat/pkg-inventory

Follow #952's layout: the installer-package lane moves to
scripts/verify/apple/installer-package.mjs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -312,7 +312,7 @@ jobs:
       - name: Real binary metadata and Interface Builder integration
         run: npm run verify:apple-dispatch && npm run verify:interface-builder
       - name: Native plist CLI selection regressions
-        run: npm run test:focused -- tests/boundary/cli/nativePlistCli.test.ts
+        run: npm run test:focused -- tests/boundary/cli/nativePlistCli.test.ts tests/boundary/cli/nativePlistPrototypeKeyCli.test.ts tests/boundary/cli/nativePlistSelectionFailureCli.test.ts
 
   reconstruction-readiness:
     name: Reconstruction readiness

.github/workflows/website-check.yml

@@ -6,6 +6,7 @@ on:
     paths:
       - "website/**"
       - "scripts/verify-website.py"
+      - "scripts/prepare-website.py"
       - ".github/workflows/**"
   workflow_dispatch:
 
@@ -24,5 +25,7 @@ jobs:
     steps:
       - name: Check out the repository
         uses: actions/checkout@v4
+      - name: Prepare the example download
+        run: python3 scripts/prepare-website.py
       - name: Check website links and publishing configuration
         run: python3 scripts/verify-website.py

.github/workflows/website-pages.yml

@@ -21,6 +21,8 @@ jobs:
     steps:
       - name: Check out the repository
         uses: actions/checkout@v4
+      - name: Prepare the example download
+        run: python3 scripts/prepare-website.py
       - name: Check website links and publishing configuration
         run: python3 scripts/verify-website.py
       - name: Configure Pages