Fix brew tap trust and Linux pip build failures on CI

[Copilot]

Two independent CI failures on Ubuntu runners: Homebrew's new tap-trust enforcement silently blocks untrusted third-party taps during brew bundle, and sbapp[macos] pulls in kivy as a transitive dependency which fails to compile on Linux due to a missing GL/gl.h.

Changes

• NewMachineSetup.sh — brew tap trust pre-flight
  install_brewfile() now parses the Brewfile for all tap directives and calls brew tap + brew trust on each before invoking brew bundle, satisfying Homebrew's tap-trust requirement without disabling the mechanism globally.

  while IFS= read -r line; do
    tap_name=$(echo "$line" | sed -n 's/^tap[[:space:]]*"\([^"]*\)".*/\1/p')
    if [ -n "$tap_name" ]; then
      brew tap "$tap_name" 2>/dev/null || true
      brew trust "$tap_name" 2>/dev/null || true
    fi
  done < Brewfile

• requirements.txt — restrict sbapp to macOS
  Added PEP 508 platform marker so sbapp[macos] (and its kivy dependency) is skipped entirely on Linux:

  sbapp[macos]; sys_platform == 'darwin'
  

[PartTimeLegend]

@copilot resolve the merge conflicts on this branch.

[PartTimeLegend]

@copilot resolve the merge conflicts on this branch.