🔐 Force revocation check when validating stapled notarization tickets
🔐 For universal binaries (which can have different per-architecture signing), now validate relevant architecture