v1: Ship a signed + notarized .dmg installer

[ish-cs]

Goal

Make install one-click for non-technical users — no terminal, no Homebrew.

Why

The MVP installs from source via ./install.sh (needs git + Homebrew + a terminal). Most people won't do that, and an unsigned app trips Gatekeeper's "unidentified developer" warning.

Scope

• Apple Developer account ($99/yr) for a Developer ID cert
• Bundle the menu bar app + server into a distributable
• Codesign with hardened runtime
• Notarize + staple
• Package as a .dmg with drag-to-Applications
• First-run flow that guides Full Disk Access + Automation grants

Notes

Permissions (FDA + Automation) still require manual user clicks — Apple enforces this. The installer can open the panes and guide, but can't grant them.