feat: ship Markd ignore-correct search packages

[ethan-huo]

Summary

• include the upstream-ready Git ignore policy correction and zlob nested-negation fix
• deduplicate policy-source native watches without treating failed registration as coverage
• pin the zlob correctness fork by full commit SHA
• replace the upstream matrix with one Celados self-hosted macOS ARM64 workflow
• build and publish only @celados/fff-node, @celados/fff-bin-darwin-arm64, and @celados/fff-bin-darwin-x64
• publish to https://npm.celados.com with no runtime binary download path
• resolve Electron app.asar native paths only through an existing app.asar.unpacked file

CI and publishing contract

• no pull-request or fork code executes on the persistent runner
• push runs are limited to main and v*; manual runs are limited at the job boundary to main and v*
• the runner uses capped Cargo concurrency and bounded persistent target/ cleanup
• both dylibs are architecture-checked, ad-hoc signed, and verified before packing
• publish manifests assert package name, exact version, registry, platform dependencies, and tarball contents
• publication uses the repository NPM_TOKEN; the committed npm config is token-free
• a clean consumer installs the exact published version and completes a real FileFinder query

Verification

• zlob core: 133/133
• Node binary-path / ASAR: 3/3
• Node SDK E2E: 30/30
• Node watch: 6/6
• Git ignore policy: 2/2
• non-Git ignore policy: 2/2
• macOS arm64 and x64 fff-c CI-profile builds
• lipo, file, and strict codesign verification for both dylibs
• platform npm tarballs contain exactly package.json plus libfff_c.dylib; Node tarball contains no duplicate native library
• exact workflow install command passes without --force

Merge behavior

The repository secret is configured. Merging to main runs the minimal workflow and publishes a revision-pinned development version to the Celados registry.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.