Mallow development b5fbade527ea

Development preview from source commit b5fbade.

Download Mallow-macos-arm64.zip and verify SHA256SUMS, then move Mallow.app to Applications.
Apple Silicon, macOS 15+. Ad-hoc signed; not Developer ID signed or notarised.
Approve this specific app in System Settings > Privacy & Security if macOS asks.
Never disable Gatekeeper globally.

New: Run client checks, read-only Wine/GStreamer architecture-header preflight, local JSON
diagnostics export, operation timings and process peak RSS. Reports omit personal paths,
raw logs, environment variables and vendor payloads; nothing is automatically uploaded.
The optimized app is Mallow-macos-arm64.zip. The separate debug app is for debugging,
not performance comparisons. Each has UUID-matched symbols; exact tracked sources and
a Mac test kit are attached. Use the app's Run client checks then Export report actions.

Setup requires approval. The installer verifies a private archive snapshot, bounds extraction,
confines links, preserves the upstream bundle layout and registers only a complete runtime.
GStreamer setup, bottle creation, Windows launching and the kernel sandbox are NOT implemented.
Runtime installed does not mean a Windows application can be launched yet.

CI checks the complete package, app/icon bundle and installation/integrity of the real pinned
archive, including altered-file detection. It does not execute Wine, test GUI usability,
establish FPS or game compatibility, or validate every supported macOS version.
Use Export report and report actual-Mac results in issue #48.
CLI: Mallow.app/Contents/Helpers/mallow diagnostics --self-test --json
English: https://mixutin.github.io/Mallow/mac-client-testing/
Suomi: https://mixutin.github.io/Mallow/fi/mac-client-testing/