* chore: replace absl::optional<T> with std::optional<T> * IWYU
* fix: ignore all NODE_ envs from foreign parent * fix: recognize ad-hoc signed binary