engine exited (code 255)) because
hardened-runtime library validation blocked the bundled Python runtime
(the PyInstaller-extracted dylibs have a different Team ID). Added the com.apple.security.cs.disable-library-validation entitlement so the engine
launches correctly.