chore(classmap): re-verify four keys on archived stock macOS builds

[afonsojramos]

Summary

The Internet Archive holds Spotify's download.scdn.co/SpotifyARM64.dmg on dates when it served these exact builds. Each app is intact and signed by Spotify, and the 1.2.94 xpui.spa is byte-identical to the one 1020094 was first built from. Each ran unpatched on macOS through the full deep CDP run, with the key's overlay applied:

Key	Build	Archive capture	In stock CSS	Observed live	Steps
1020092	1.2.92.148	2026-06-17	32/36	29/36	10/10
1020094	1.2.94.583	2026-07-18	33/36	30/36	10/10
1020097	1.2.97.270	2026-08-24	32/36	29/36	10/10
1020098	1.2.98.301	2026-08-29	32/36	29/36	10/10

• Every published key now has a live deep CDP verification and binds verified_classmap_sha256.
• 1020094: all 13 required paths are verified_cdp, including settings.button.wrapper, which was unverified.
• 1020092: returns to the build it was first verified on (1.2.92.148). Its Linux .147 run stays in its history, and search_chips.wrapper was observed live.
• 1020097 and 1020098: both dialog containers move to verified_cdp.
• 1020084: notes that the archived stock 1.2.84.476 .deb has CSS byte-identical to the 1.2.84.475 build it was verified on.
• Maps, overlays and stale leaves are unchanged, and each VERIFICATION.md keeps its earlier history.

Verification

pnpm check passes.