• Have you followed the guidelines in our Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same change?
• Have you added an explanation of what your changes do and why you'd like us to include them?
• Have you written new tests for your changes? Here's an example.
• Have you successfully run brew lgtm (style, typechecking and tests) with your changes locally?

There was an edge case in the signing audit where 7z files caused the quarantine attribute to removed when being decompressed. This change propagates the quarantine attribute to make sure it is there.

I also found a place we can skip the installation of the primary container dependency if it is already linked.

Note: I used claude-code to discover the fix for the missing quarantine attribute, but cleaned up its output.