Automate a resettable macOS VM with versioned snapshots, isolated identities, and TCC/Keychain/quarantine reset.
Part of #69.
Acceptance:
- Equivalent restores yield equivalent manifests.
- No personal Apple ID, credentials, or host-home mounts are used.
Automate a resettable macOS VM with versioned snapshots, isolated identities, and TCC/Keychain/quarantine reset.
Part of #69.
Acceptance: