SignPath Foundation signs a file only when it carries a product name and
version, and their signing configuration checks both. The .exe had neither:
its Properties showed no Details at all. The spec now builds a version
resource from the package's own __version__ (MeshTerm, 0.10.2, the author,
the copyright line), on Windows only. Checked on a local freeze: Windows
reads every field back, and the binary still runs.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>