SentinelDen Studio CVE feed: Ed25519 signatures and supply-chain trust

Auditing iOS binaries means trusting a CVE feed. How the feed works, why every entry is Ed25519-signed, and what the redirect guard prevents.