Add com.apple.security.device.audio-input to both mac entitlement plists so the sandboxed app can access the microphone.
Fix desktop-release workflow to reference correct package path after Tauri→Electron migration. Add macOS entitlements and notarization config for electron-builder.