Update cert handling and add LOCAL_DEPLOY support

- Update ModdingToolBase submodule to latest commit
- Add LOCAL_DEPLOY constant for local deployment builds
- Embed modverify-trust.cer as a resource if present
- Register trusted certs at runtime, supporting dev certs in DEBUG/LOCAL_DEPLOY
- Refactor Program.cs to use embedded cert resource name constant

Author: AnakinRaW

modules/ModdingToolBase

@@ -25,8 +25,17 @@
 		<NBGV_ThisAssemblyIncludesPackageVersion>true</NBGV_ThisAssemblyIncludesPackageVersion>
 	</PropertyGroup>
 
+	<!-- Set /p:LocalDeploy=true (e.g. from deploy-local.ps1) to compile in the local-deploy dev
+	     trust cert pickup path. Off by default; release builds never see it. -->
+	<PropertyGroup Condition="'$(LocalDeploy)' == 'true'">
+		<DefineConstants>$(DefineConstants);LOCAL_DEPLOY</DefineConstants>
+	</PropertyGroup>
+
 	<ItemGroup>
 	  <EmbeddedResource Include="Resources\Baselines\baseline-foc.json" />
+	  <EmbeddedResource Include="Resources\Certs\modverify-trust.cer"
+	                    LogicalName="AET.ModVerify.App.Resources.Certs.modverify-trust.cer"
+	                    Condition="Exists('Resources\Certs\modverify-trust.cer')" />
 	</ItemGroup>
 
 	<ItemGroup>

src/ModVerify.CliApp/ModVerify.CliApp.csproj

@@ -185,8 +185,21 @@ protected override IRegistry CreateRegistry()
             : new WindowsRegistry();
     }
 
+    private const string EmbeddedTrustCertResource = "AET.ModVerify.App.Resources.Certs.modverify-trust.cer";
+
     protected override async Task<int> RunAppAsync(string[] args, IServiceProvider appServiceProvider)
     {
+        if (IsUpdateableApplication)
+        {
+            string? devCertPath = null;
+#if DEBUG || LOCAL_DEPLOY
+            devCertPath = System.IO.Path.GetFullPath(
+                System.IO.Path.Combine(AppContext.BaseDirectory, "..", "dev-trust.cer"));
+#endif
+            appServiceProvider.GetRequiredService<CertificateManager>()
+                .RegisterTrustedCertificates(typeof(Program).Assembly, EmbeddedTrustCertResource, devCertPath);
+        }
+
         var result = await HandleUpdate(appServiceProvider);
         if (result != 0 || _modVerifyAppSettings is null)
             return result;