Install the latest signed and notarized Headless release:
brew install --cask LockInTime/headless/headlessThe cask is generated from the latest public
LockInTime/headless release. The
update workflow verifies the release checksum, universal architectures,
Developer ID signature, stapled notarization ticket, and Gatekeeper assessment
before committing a new version.