feat: keychain isolation signing option

  Credit: idea and initial implementation by devnoname120 for Feather claration/Feather#611
feat: ignore updates per app in library
fix: source apps show imported or signed instead of installed
feat: detailed step by step signing logs
fix: signing logs opening half scrolled

Author: faroukbmiled

.gitignore

@@ -75,6 +75,7 @@ release.sh
 cert.json
 release_notes.txt
 pending_notes.txt
+DEV.md
 
 # Signing material / secrets (belt-and-suspenders)
 *.pem

RyukSign/Backend/Observable/OptionsManager.swift

@@ -102,6 +102,8 @@ struct Options: Codable, Equatable {
 	var changeLanguageFilesForCustomDisplayName: Bool
 	/// If tweaks should be injected into all app extensions (PlugIns and Extensions)
 	var injectIntoExtensions: Bool
+	/// Gives each signed app a keychain group derived from its bundle id so apps can't read each other's entries
+	var keychainIsolation: Bool
 	/// Resolved managed-tweak injections for this sign; per-sign working copy only. Optional so old saved options decode.
 	var tweakInjections: [TweakInjectionSpec]? = nil
 
@@ -148,6 +150,7 @@ struct Options: Codable, Equatable {
 		removeProvisioning: true,
 		changeLanguageFilesForCustomDisplayName: false,
 		injectIntoExtensions: false,
+		keychainIsolation: false,
 
 		// MARK: Experiments