Why the Norvane security team rotated signing material for the Forge macOS app and CLI, what was and was not affected, and the update timeline.