M14: clean wasm build warnings; macOS CLI zip without AppleDouble files

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

crates/engine/src/cmd/tools.rs

@@ -792,6 +792,8 @@ fn read_aloud(s: &mut Session, _: &Value) -> CmdResult {
         s.selected_text()
     };
     let text: String = text.chars().take(20_000).collect();
+    #[cfg(target_arch = "wasm32")]
+    let _ = &text;
     #[cfg(target_os = "macos")]
     {
         let _ = std::process::Command::new("say").arg(&text).spawn().map_err(|e| CmdError::Failed(e.to_string()))?;

crates/ui-egui/src/control.rs

@@ -224,6 +224,8 @@ pub fn save_screenshot(image: &egui::ColorImage, path: Option<&str>) -> Value {
     let bytes: Vec<u8> = image.pixels.iter().flat_map(|c| c.to_array()).collect();
     let rendered = wordcraft_render::Rendered { width: w as u32, height: h as u32, pixels: bytes };
     let png = rendered.to_png();
+    #[cfg(target_arch = "wasm32")]
+    let _ = (&png, path);
     #[cfg(not(target_arch = "wasm32"))]
     {
         if let Err(e) = std::fs::write(path, &png) {

packaging/macos/package.sh

@@ -155,7 +155,7 @@ copy_docs "$CLI_DIR"
 sign --options runtime "$CLI_DIR/wordcraft-cli"
 codesign --verify --strict --verbose=2 "$CLI_DIR/wordcraft-cli"
 rm -f "$CLI_ZIP"
-ditto -c -k --keepParent "$CLI_DIR" "$CLI_ZIP"
+ditto -c -k --norsrc --noextattr --keepParent "$CLI_DIR" "$CLI_ZIP"
 # A bare Mach-O can't carry a stapled ticket; Gatekeeper looks the notarization up online.
 if [ "$NOTARIZE" = 1 ]; then notarize "$CLI_ZIP"; fi