fix: resolve remaining platform CI regressions

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

scripts/vendored-checksums.txt

@@ -40,7 +40,7 @@ a96a1acc75fd6595811b28420cf0495b87fac98c4dbc73aa0d742b6824f607c8  vendored/mimal
 49be69a4b674e09690a63870830f3ffb05698ed4210949ef5add11957a08325b  vendored/mimalloc/src/threadlocal.c
 dab3009c0d76b0c5e05ad8abc7c9f8f6effca547fea3c0394be96418a85c1081  vendored/nomic/code_tokens.h
 494d329d06e33904e6264b1f9d1cc82de2c6bb212f8d78ba281b7e1eb1179b61  vendored/nomic/code_vectors.h
-9512509b1bccb7461f79bea8aad6280ae4699e925fa4804381b71f59e7efb0c5  vendored/sqlite3/sqlite3.c
+190d82e7899c6cf74260f122c4a737f77c68e98e8d516750df8d56e7fc00ad57  vendored/sqlite3/sqlite3.c
 19585c8b5230e9d4f223bf31b709ece7b6a0bb3faf00d8310625d8e58cda1b1d  vendored/sqlite3/sqlite3.h
 ea81fb7bd05882e0e0b92c4d60f677b205f7f1fbf085f218b12f0b5b3f0b9e48  vendored/sqlite3/sqlite3ext.h
 7efd127c0fc4fe26a07684345cce9287762346abeab665e2fe72711c6fc118bd  vendored/tre/regcomp.c

tests/test_cli.c

@@ -18,6 +18,7 @@
 #include <daemon/bootstrap.h>
 #include <daemon/runtime.h>
 #include <daemon/version_cohort.h>
+#include <foundation/constants.h>
 #include <foundation/platform.h>
 #include <mcp/mcp.h>
 #include <foundation/yaml.h>
@@ -33,6 +34,9 @@
 #ifndef _WIN32
 #include <sys/wait.h>
 #endif
+#ifdef __APPLE__
+#include <mach-o/dyld.h>
+#endif
 #include <errno.h>
 #include <limits.h>
 #include <zlib.h>
@@ -1425,11 +1429,16 @@ TEST(cli_update_agent_configs_finish_before_guard_release) {
     const char *asset_name = "codebase-memory-mcp-linux-amd64-portable.tar.gz";
 #endif
 #endif
-    const char *native_fixture =
 #ifdef __APPLE__
-        "/usr/bin/true";
+    /* Use the structurally real test runner rather than re-signing an Apple
+     * platform binary. Turning /usr/bin/true's arm64e/platform signature into
+     * an ad-hoc signature is OS-policy-dependent on older macOS runners. */
+    char native_fixture_path[CBM_SZ_4K] = {0};
+    uint32_t native_fixture_size = (uint32_t)sizeof(native_fixture_path);
+    ASSERT_EQ(_NSGetExecutablePath(native_fixture_path, &native_fixture_size), 0);
+    const char *native_fixture = native_fixture_path;
 #else
-        "/bin/true";
+    const char *native_fixture = "/bin/true";
 #endif
     FILE *native_file = fopen(native_fixture, "rb");
     ASSERT_NOT_NULL(native_file);

vendored/sqlite3/sqlite3.c

@@ -39378,7 +39378,7 @@ SQLITE_PRIVATE int sqlite3KvvfsInit(void){
 /*
 ** Maximum supported path-length.
 */
-#define MAX_PATHNAME 512
+#define MAX_PATHNAME 4096
 
 /*
 ** Maximum supported symbolic links