docs(pointer): align runbook evidence binding

[rogu3bear]

Summary

• align the macOS release runbook and NORTH_STAR with the current manual-release-evidence verifier
• document that evidence is bound to release tag, DMG filename, DMG SHA-256, mounted app identity, app version, app build, and executable SHA-256
• keep this tranche focused on the original macOS app release path; no website surface added

Verification

• swift test --package-path apps/macos --filter IdentityTests/testReleaseRunbookDrivesEndToEndReadinessWithoutClaimingAvailability
• swift test --package-path apps/macos --filter IdentityTests/testNorthStarDefinesProductionReadinessBar
• swift test --package-path apps/macos --filter IdentityTests/testNorthStarAuditGateBuildsPromptToArtifactChecklist
• ./scripts/check-monorepo-references.sh
• ./scripts/check-website-boundary.sh
• ./scripts/check-distribution-boundary.sh
• ./scripts/check-compatibility-boundary.sh
• ./scripts/check-local-first.sh
• ./scripts/check-app-ui-contract.sh
• git diff --check
• swift test --package-path apps/macos

Remaining release blockers

• no Keychain notarytool profile named notarization
• DMG/app are not notarized/stapled yet; Gatekeeper still rejects the local release artifact
• no stable public release metadata matching app version and DMG digest
• real manual release evidence cannot be completed until those authority blockers are resolved

[kilo-code-bot]

Code Review Summary

Status: 1 Issue Found | Recommendation: Address before merge

Overview

Severity	Count
CRITICAL	0
WARNING	1
SUGGESTION	0

Issue Details (click to expand)

WARNING

File	Line	Issue
apps/macos/RELEASE_RUNBOOK.md	96	Inconsistent terminology - "mounted app bundle ID" should be "mounted app identity" to match the addition above and NORTH_STAR.md

Other Observations (not in diff)

Issues found in unchanged code that cannot receive inline comments:

File	Line	Issue

Files Reviewed (3 files)

• NORTH_STAR.md - 0 issues
• apps/macos/RELEASE_RUNBOOK.md - 1 issue
• apps/macos/Tests/PointerDesignerTests/IdentityTests.swift - 0 issues

---

_{Reviewed by grok-code-fast-1:optimized:free · 101,420 tokens}

[kilo-code-bot]

WARNING: Inconsistent terminology - "mounted app bundle ID" should be "mounted app identity" to match the addition above and NORTH_STAR.md

Suggested change

	DMG SHA-256, mounted app bundle ID, app version, app build, and executable
	DMG SHA-256, mounted app identity, app version, app build, and executable