macOS developer tools still trust compromised eMudhra certificates

Nine days after the eMudhra CA compromise was disclosed, Apple's stock git on macOS still accepts forged github.com certificates without warning. Homebrew's git already rejects them, while the macOS 27.2 update reverted users' manual workaround.

• Apple was notified October 17; /usr/bin/git still accepts the eMudhra chain as of October 28
• Homebrew ca-certificates removed the affected roots and refuses the forged cert
• macOS 27.2 reverted manual cert.pem cleanup, restoring exposure
• git clone, git push and HTTPS calls from curl and python3 in CI are at risk