[DeathofBrain]

What changed

This small follow-up PR completes the macOS ARM64 instance flow on top of codex/macos-13-14-integration and fixes a page refresh race.

• Add native per-instance Google Play installation and removal: pinned API35 ARM64 profile, component validation, -writable-system marker, overlay ownership checks, bounded remount/cold-boot retries, partial-install recovery, lifecycle locking, and verified uninstall cleanup.
• Enable the macOS instance menu, CLI/API capability reporting, and platform guidance without requiring the x86 execution bridge.
• Keep a just-saved instance configuration visible when an older /api/instances poll arrives after the settings PATCH. The temporary override is cleared when the server publishes matching values, so the card and memory check target do not jump back to the old memory_mb.

Validation

• Full Go test and vet passed on the pinned Manager source.
• Windows amd64 cross-compile checks passed for the affected packages.
• scripts/test_create_cancel.mjs: 15/15 passed.
• scripts/test_playstore_ui.mjs: 27/27 passed.
• macOS ARM64 package build, ad-hoc signature verification, privacy/author/whitespace checks and packaged hash verification passed.

The disposable Android 15 API35 ARM64 instance was initialized and the five official Play Store files were imported. Final install/remove guest verification remains pending because the host memory precheck requires about 4.5 GB available and the test host remained below that threshold; the implementation does not lower or bypass this guard.