Refactor macdeploycheck installation and update Brewfile tap path

This commit modifies the `macdeploycheck` formula to install the script directly from the tapped repository instead of using a local file URL. Additionally, the `Brewfile` is updated to use the directory of the Brewfile for the tap path, ensuring compatibility when running `brew bundle` from different locations. The `install_brew_deps.sh` script is also enhanced to provide more detailed error messages when missing formulae are detected.

dist/macos/macdeploycheck.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# macdeploycheck: sanity check a deployed macOS .app bundle for accidental runtime deps
+# on Homebrew/MacPorts paths (which break distribution / App Store / notarization).
+#
+# Usage:
+#   macdeploycheck /path/to/App.app
+
+app="${1:-}"
+if [[ -z "$app" ]]; then
+  echo "Usage: macdeploycheck <path/to/App.app>" >&2
+  exit 2
+fi
+if [[ ! -d "$app" ]]; then
+  echo "Error: app bundle not found: $app" >&2
+  exit 2
+fi
+if [[ ! -d "$app/Contents" ]]; then
+  echo "Error: not a macOS app bundle (missing Contents/): $app" >&2
+  exit 2
+fi
+
+fail=0
+tmp="$(mktemp -t macdeploycheck.XXXXXX)"
+trap 'rm -f "$tmp"' EXIT
+
+# Collect Mach-O files (executables + dylibs) inside the bundle.
+while IFS= read -r -d '' f; do
+  if file "$f" | grep -q "Mach-O"; then
+    echo "$f" >>"$tmp"
+  fi
+done < <(find "$app/Contents" -type f \( -perm -111 -o -name "*.dylib" -o -name "*.so" \) -print0 2>/dev/null)
+
+if [[ ! -s "$tmp" ]]; then
+  echo "Warning: no Mach-O files found under $app/Contents" >&2
+  exit 0
+fi
+
+echo "macdeploycheck: scanning for external (Homebrew/MacPorts) runtime deps..."
+while IFS= read -r f; do
+  deps="$(otool -L "$f" 2>/dev/null | tail -n +2 | awk '{print $1}' || true)"
+  while IFS= read -r dep; do
+    [[ -z "$dep" ]] && continue
+
+    # Ignore system and rpath/loader/executable paths.
+    case "$dep" in
+      /System/*|/usr/lib/*|@rpath/*|@loader_path/*|@executable_path/*) continue ;;
+    esac
+
+    # Common accidental runtime deps that will break distribution.
+    if [[ "$dep" == /opt/homebrew/* || "$dep" == /usr/local/* || "$dep" == /opt/local/* ]]; then
+      echo "ERROR: $f links to external path: $dep" >&2
+      fail=1
+    fi
+  done <<<"$deps"
+done <"$tmp"
+
+if [[ "$fail" -ne 0 ]]; then
+  cat >&2 <<'EOM'
+
+One or more binaries in your .app link to a Homebrew (or MacPorts) path.
+That usually means the bundle is not self-contained and will fail on other machines.
+
+Fix: re-run your deploy step (e.g. macdeployqt) so frameworks/dylibs are bundled and
+their install names are rewritten to @rpath/@loader_path.
+EOM
+  exit 1
+fi
+
+echo "OK: no external Homebrew/MacPorts runtime deps detected."
+exit 0
+