v0.1.5

Changed

• Claude live limits are now opt-in. The app no longer reads the Claude Code token from
  the Keychain at launch, so no credential prompt appears when it starts. The Claude tab shows a
  Connect banner (also a Connect/Disconnect control in Settings → Claude); clicking it reads
  the token in a context you initiated — macOS asks once, then remembers. Your account and cost
  data still show without connecting. Upgrading from an earlier version? Live Claude limits are
  off until you click Connect once (it's a one-time, opt-in step now).
• Local Scripts/build-app.sh builds now auto-sign with an installed Developer ID (stable
  signature) instead of ad-hoc, so rebuilding during development doesn't re-trigger the Keychain
  prompt. Falls back to ad-hoc when no Developer ID is present.