v1.4.4

The Windows installer is signed. ekubo-wallet_1.4.4_x64-setup.exe carries an
Authenticode signature issued through Azure Trusted Signing to Ekubo, Inc.,
so Windows names that publisher in the install prompt instead of reporting an
unknown one. A certificate this new has no download reputation yet, so
SmartScreen can still interrupt the install; the publisher name in the prompt is
what distinguishes a genuine build, and every asset below also keeps the
detached updater signature and SHA-256 digest that earlier releases carried.

Nothing else changes. The one commit since 1.4.3 corrects a comment that
credited the wrong fix for a duplicate Dock tile, and no behavior moves with it.
The macOS and Linux artifacts are built, signed, and notarized exactly as they
were in 1.4.3, and an existing installation updates through the same signed
latest.json path.

Warning

Windows and Linux key-storage warning: The current builds use per-user credential services that do not isolate raw account keys or the database key to Ekubo Wallet. Same-user malware, including a prompt-injected local agent that can execute programs, can extract those keys and bypass wallet policy and review. Read the security model before installing.