Security warnings on macOS

Hi! Thanks for making ruff, it's a great tool. I also appreciate the regular development and updates, and I've configured a hook to automatically keep some of my repositories on the latest versions of ruff and related tools.

However, I've found that Apple's "Gatekeeper" security is getting more and more onerous, requiring me to re-authorize ruff on every repo, every time it gets an update. They recently took away the click one button way to do this, now I have to go dig in the system settings panels every time. Is there a way to use some kind of Astral-signed version of Ruff with pre-commit that won't give me all these security warnings? Or is this inconvenience just the price I pay to live in Apple's world?

The issue names no files or tests. Start by tracing how Ruff binaries are obtained and invoked through the pre-commit hook on macOS, then inspect the distribution and signing process; done means determining whether an Astral-signed Ruff can avoid repeated Gatekeeper authorization and documenting or implementing the supported path.

Written by the indexing model from the issue text.