Unsigned macOS desktop build.\n\n- Adds one-click desktop updates from the in-app update icon: download the latest DMG, replace /Applications/sub2cli.app, and reopen the app.\n- Compacts repeated route-pool failure logs into time-window summaries while preserving route switch and recovery events.