v0.3.6 — one-click update fixed, every chat, live chats

On 0.3.5? Its Update button cannot install this release; that is the bug fixed here. Download BurnmeterSetup.exe below and run it once. From 0.3.6 on, Update installs new versions in one click.

Fixed

• One-click update now runs the installer. In 0.3.5 the Update button closed
  Burnmeter and nothing else happened. The update command reached Windows' cmd with
  its quotes escaped, so cmd could find neither the installer nor the app to reopen.
  The fix ships in this version, so 0.3.5 has to install 0.3.6 once by hand: run
  BurnmeterSetup.exe from this release. Updates from 0.3.6 on are one click.
• The Chats page reaches every chat. It stopped at 60 rows with no way to see the
  rest (60 of 195 on the maker's PC). It now shows 60 and a "Show all" button, and
  "Most $" ranks every chat, not only the newest 200. The table also fills the window:
  a later style rule held it to 320 px, about four rows. Costs of $10,000 and up are no
  longer cut off ("$10,4…").
• The live card shows every chat that's running. It had one row per model, so four
  chats on Opus 5.5 made one row, named after whichever chat wrote last and costed at
  all four. It's now "Live chats", with a row and a rate for each chat.
• Chat titles are back on Windows. The Claude desktop app moved its session list to
  %LOCALAPPDATA%\Claude-Data, so Chats, Recent activity and the live card showed
  folder names ("repo", "ClaudeWorkspace") instead of the titles in the app. Burnmeter
  reads the new place too.
• Pro sync says why it stopped. A refused push or pull used to fail silently. The
  Pro bar now shows when this device last synced, or why it couldn't: no Pro plan,
  an unverified email, the daily quota, the network, or a session that ended.
• A killed server's build worker kept running for minutes at 1.2–1.8 GB, and its
  temp files were never deleted. The worker now exits with its server.
• The gauge's "your typical" label read "ypical"; it now stays on the canvas.
• The macOS release gets its versioned dmg (Burnmeter-0.3.6.dmg) as well.

Changed

• Pro sync pushes only what changed. It pushed every 60 s. It now checks every
  10 minutes, pushes a changed snapshot (and one every 6 hours), never twice within
  5 minutes, and doesn't pull while the window is hidden. The device name travels
  inside the encrypted snapshot only. "Online" means synced in the last 25 minutes.
• Firebase gets a key derived from your Pro password, not the password. An
  account made before 0.3.6 moves over at its next sign-in. Firebase then signs the
  account's other devices out, and they need 0.3.6 to sign back in.
• Electron 45, with a hardened shell. A splash shows while the server starts,
  the server is restarted if it stops, and navigation, permissions and page content
  are locked to the local dashboard. npm audit went from 18 findings to 0.

Added

• firestore.rules, which keep sync to verified Pro accounts, cap a snapshot at
  256 KiB and allow one update per device every 5 minutes, with 50 tests that run on
  Google's rules engine. They take effect once deployed (docs/FIRESTORE_RULES.md).