[Raymond711xl]

What changed

• turns AgentAwake into a standalone macOS menu-bar app that works without Codex, Claude, Cloud, Xcode, Swift, or terminal setup
• moves Login at Launch and Codex / Claude Hooks into optional in-app Settings, while preserving zero-config local activity detection
• publishes two architecture-specific disk images:
  • AgentAwake-0.4.0-Apple-Silicon.dmg
  • AgentAwake-0.4.0-Intel.dmg
• uses ad-hoc signing so the public release needs no Apple Developer ID, Team ID, notarization credentials, or GitHub Secrets
• documents the one-time macOS Privacy & Security → Open Anyway path in both READMEs
• records the fixed 0.4.0 experience: refined five-position slider, first-drag activation fix, compact four-point-sparkle + single-Z status mark, and warm clay-orange app icon
• adds tag-driven CI / GitHub Release automation and SHA-256 checksums

User impact

• users download the DMG for their chip and double-click the app
• timed modes work immediately with no agent software
• existing Codex / Claude data is detected automatically when present
• Hooks remain optional and are installed, repaired, or removed only through Settings
• the first launch may require one explicit Open Anyway action because this fast release route is not notarized

Validation

• swift build --disable-sandbox -Xswiftc -warnings-as-errors
• swift run --disable-sandbox AgentAwakeSelfTest
• Apple Silicon app and both helpers verified as arm64
• Intel app and both helpers verified as x86_64
• strict nested ad-hoc code-signature verification passed for both apps
• both DMGs passed hdiutil verify
• both local release files passed the generated SHA-256 manifest
• Gatekeeper rejection was reproduced as expected, matching the README first-launch instructions
• app launch, icon resources, and live menu-bar status mark were checked on macOS

Release plan

After CI passes, merge this PR and create tag v0.4.0. The Release workflow will publish both DMGs and the checksum manifest.