fd0 Desktop 0.23.1

The CLI now avoids extra authentication prompts in two workflows:

• Use your preferred authentication method directly. With a valid device-local default, unlocking and fresh authorization skip the method chooser. --method still overrides the default for one command.
• Authenticate once when creating a grant on a locked vault. Secret, password-field, service-field and SSH grants show your request first, then use one authentication to unlock the vault and authorize the grant.

Recipe approval still requires unlocking before you can review the command and authorize it.

Desktop dependencies include upstream security fixes. macOS packaging and validation now retry temporary failures when retrieving Apple notarization tickets; signing, notarization, and Gatekeeper checks remain required.

Full changelog