Strip AppleDouble sidecars before auditing a sealed wheelhouse
macOS archive metadata can reappear on Linux as AppleDouble files whose names look like wheels and cause static wheel audits to parse non-ZIP bytes. After verifying the sealed archive hash, remove only regular files named ._* inside the extracted, hash-bound runtime directory, th…