tenant.openagents/omega

Bind every reviewer check to the candidate, not to whatever is installed

Bind every reviewer check to the candidate, not to whatever is installed The independent reviewer took --app, defaulting to /Applications/Omega.app. Two of its four checks read that path and the other two read the disk image, so the tool could assess two different artifacts in one receipt and say nothing about it. Run exactly as documented it returned accepted with zero disagreements while notarization and forbidden_strings were reading a candidate nobody had named -- rc16 was installed, the claim was about rc15. The reviewer caught it only by comparing CFBundleVersion, the host binary digest and the CDHash by hand, which is not a property of the tool. --app is gone. The application comes out of the disk image the claim is about, mounted read-only, and the tool refuses a candidate that does not contain exactly one application. Also fixes signing from an isolated worktree. The signing package was derived from the script's own location three parents up, which holds only when the reviewer runs from the canonical omega checkout beside a canonical openagents checkout -- and an independent reviewer is supposed to run isolated, where it raised FileNotFoundError from inside subprocess. A reviewer that cannot sign from an isolated tree pushes reviews back into the producer's directory layout. Watched failing before it was trusted: --app is now rejected outright, and the rc16 disk image against the rc15 claim refuses with one disagreement where the old shape would have accepted. Release Notes: - N/A