Security + first-run fixes.
- Removed the developer license mock from Release builds (it could be used to unlock Pro without a purchase).
- First-run onboarding now actually shows (Welcome → Permissions → Shortcuts).
- Hardened the offline license cache against forged timestamps.
Signed with a stable developer certificate (not notarized — see https://lovelyscreenshots.com/install for first-launch steps).
sha256: e7cc752de8fcb2fc969f60fc3a72a9925146f1e580ed3935619ef4940bcecfe9