EdDSA-signed update feed
Chat Hoarding for Mac fetches a signed update feed at chathoarding.app/appcast.xml. Every shipping version carries an Ed25519 signature. The public key is baked into the app at compile time; the private key lives only in our build keychain. Without a matching signature, the app refuses to install, even if the feed XML were spoofed.