Keep a Docker development platform running and prepare macOS notarization

[ancongui]

Start a persistent local development platform with weave platform up: the API, scheduler, PostgreSQL, and Keycloak run in an owned Docker Compose project. Reuse the workspace and account across stops and resumes, inspect readiness and logs, and sign in from the CLI or Studio. The existing foreground mode remains available. Includes the illustrated setup guide and alpha14 packaging.

Prepare an opt-in, release-tag-only macOS Developer ID workflow that verifies signatures, accepted Apple submissions, stapled tickets, Gatekeeper trust, and mounted DMG contents. Signing credentials stay in a protected environment. No Apple signing identity or submission was available; ordinary installers remain ad-hoc signed and unnotarized.

Validation:

• All 17 normal stages passed: 3,705 core unit/contract tests, 76 Agentic and 29 Files tests, lint/types/format, documentation, and installed artifacts.
• Studio type/format/build checks and all 653 unit tests passed.
• Real Docker Desktop setup, account creation, successful saved workflow, stop/resume, and retention passed; unrelated containers were preserved.
• Real Studio browser PKCE, workspace/run reads, host restart recovery, logout/revocation, plus installed CLI browser PKCE and authenticated workspace check passed against local Keycloak.

This is a single-computer development environment. No full release recovery/load rerun, Apple notarization, or Azure redeployment is claimed.