chore: modernize APT runtime and CI

README.md

@@ -14,7 +14,7 @@ APT is a Windows Electron desktop app that imports an existing Alta Video sessio
 ## Requirements
 
 - Windows (current supported runtime scope)
-- Node.js and npm for development
+- Node.js 22.12 or newer and npm for development
 - Chrome with the bundled extension loaded unpacked
 - `aware-cam-proxy.exe` beside the development app or packaged portable executable
 - An active Alta Video login in Chrome
@@ -39,6 +39,7 @@ Use **Generate / Rotate** if a pairing may have been exposed, then update the ex
 ```bash
 npm test          # Node test suite, including synthetic runtime contracts
 npm run check     # Syntax checks plus tests
+npm run audit:prod
 npm run build-test
 ```
 
@@ -62,4 +63,6 @@ Core files:
 npm run build
 ```
 
-The output remains Windows-only because the external camera helper is Windows-specific. Copy `aware-cam-proxy.exe` beside the portable APT executable before use. Dependencies are intentionally unchanged in this hardening release.
+The output remains Windows-only because the external camera helper is Windows-specific. Copy `aware-cam-proxy.exe` beside the portable APT executable before use.
+
+CI produces an unpacked Windows build only for verification. It does not publish, release, push, deploy, or sign artifacts. Windows code signing and verification with the approved certificate remain mandatory manual release gates; a successful build must not be represented as signed.