ci(pointer): block remote package and endpoint drift

[rogu3bear]

Summary

• strengthen the local-first guard to reject remote SwiftPM package URLs and hardcoded HTTP endpoints in app source/package surfaces
• add TelemetryDeck to the telemetry deny-list
• pin the expanded local-first guard in IdentityTests

Verification

• ./scripts/check-local-first.sh
• swift test --package-path apps/macos --filter IdentityTests/testLocalFirstGuardChecksAppSourceForNetworkAndTelemetry
• git diff --check

Remaining blockers

• Release authority blockers prevent mass-production readiness #71 remains the authority blocker for notarization, Gatekeeper acceptance, stable release metadata, and manual release evidence before mass-production readiness

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (2 files)

• apps/macos/Tests/PointerDesignerTests/IdentityTests.swift
• scripts/check-local-first.sh

---

_{Reviewed by grok-code-fast-1:optimized:free · 46,932 tokens}