Oh My OpenAgent 5.1.62 pins signed device-service downloads
Oh My OpenAgent 5.1.62 replaces a placeholder verifier with a pinned Ed25519 public-key set and refuses an invalid device-service signature before writing the download. It also repairs missing skill and prompt references, adds CI validation for those references and improves certificate-authority trust diagnostics.
Why it matters: The release moves a downloaded helper from nominal signature handling to an explicit pinned-key acceptance boundary, while reference validation reduces runtime failures caused by missing packaged instructions.