Maintenance release — no app changes from 0.2.0.
First release built end-to-end through the automated Developer ID sign + notarize pipeline, so the download opens with a normal double-click — no Gatekeeper warning. Also fixes a release.sh packaging bug.
Install: open the .dmg, drag Cookie Monster into Applications, double-click it. On first launch click Always Allow for keychain access. Cookie Monster is read-only on your credentials.