Without target_commitish, softprops/action-gh-release creates tags
on the default branch (master) instead of the triggering branch.

Made-with: Cursor

Without -DLLAMA_BUILD_BORINGSSL=ON, cmake picks up Homebrew OpenSSL
and links dynamically → Team ID mismatch on codesigned macOS apps.

Changes:
- Add -DLLAMA_BUILD_BORINGSSL=ON (static SSL, no dynamic dependency)
- Add -DCMAKE_BUILD_WITH_INSTALL_RPATH=ON (apply rpath at build time)
- Switch to -DCMAKE_INSTALL_RPATH='@loader_path' (consistent with release.yml)
- Add -DLLAMA_BUILD_TOOLS=ON
- Add verification step: otool -L check fails CI if dynamic SSL found

Made-with: Cursor

LLAMA_BUILD_BORINGSSL doesn't exist in this fork's CMakeLists.txt —
the flag was silently ignored, binary still linked Homebrew OpenSSL.

Correct approach: disable curl and OpenSSL entirely, build all libs
statically. Produces a single self-contained binary with only system
dylibs (libSystem, libc++, Metal frameworks).

- BUILD_SHARED_LIBS=OFF — links libllama, libggml etc. statically
- LLAMA_CURL=OFF — no curl dependency, no HF model download
- LLAMA_OPENSSL=OFF — no OpenSSL/crypto dependency
- hw.ncpu instead of hw.logicalcpu (correct macOS sysctl key)
- Verification step: fail CI if any non-system dylib found

Made-with: Cursor

…-org#20970)

* common : inhibit grammar while reasoning budget is active

* cont : update force_pos in accept

* cont : fix tests

* cont : tweak should apply logic

* cont : return early not using grammar sampler

* Add tests

* cont : prevent backend sampling when reasoning budget enabled

* cont : fix typo

---------

Co-authored-by: Piotr Wilkin <piotr.wilkin@syndatis.com>