feat: log opened files and folders to the Recent list (v0.5.2)

The sidebar's Recent list previously tracked only folders opened through
the Open dialog. Now every file open — Finder double-click, drag-drop, the
Open dialog, iOS document picker, and the aimemoryreader:// URL scheme —
records to Recent via the single openSingleFile choke point, and folder
opens record too. Entries show a file or folder icon, reopen correctly by
type on click (file -> openSingleFile, folder -> loadDirectory), de-dupe,
and cap at 10 (was 5). The storage key stays "recentFolders" so existing
recents, including iCloud-synced copies, carry over with no migration.

Also bumps to 0.5.2, regenerates project.pbxproj from project.yml (clearing
the stale 0.5.0 drift), and backfills CHANGELOG for v0.5.0-v0.5.2.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NCEKk664R15hUcn8B3jcLA

docs(zh): README install steps now reflect notarized build (double-cl…

…ick, no workaround)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DTdK77ycMYbUR1s2pJpUW9

v0.5.0: sign + notarize the release build

Ship the GitHub zip signed with a Developer ID and notarized by Apple, so it opens with no unidentified-developer warning. Drops the right-click / xattr workaround from the README. build-release-zip.sh now signs (hardened runtime + timestamp) and notarizes when notary credentials are set.

v0.4.13: Unsandbox the GitHub zip build; codify release pipeline

v0.4.11/12 zips were accidentally built with the MAS sandbox profile
(no network entitlement) -> Check for Updates failed with hostname-not-
found. Restored the documented CODE_SIGN_ENTITLEMENTS="" pipeline as
scripts/build-release-zip.sh with a guard refusing sandboxed output.

v0.4.12: Ask once per folder when directory context needs access

v0.4.11's folder-context silently no-opped for folders outside existing
sandbox grants (most personal notes dirs). Now prompts once with the
folder pre-selected, persists the grant, remembers declines per folder.
Hardened the opened-file guard with standardized path comparison.

Drop iCloud KV-store entitlement for MAS v1; remove stray root icon.png

- com.apple.developer.ubiquity-kvstore-identifier needed the iCloud
  Services capability on the App ID, and was also what forced a
  provisioning profile on ad-hoc Release builds (the release pipeline
  worked around it with CODE_SIGN_ENTITLEMENTS=""). Removed for the
  MAS v1 submission; an inline comment documents how to re-enable.
- icon.png at the repo root was superseded by Assets.xcassets and is
  referenced nowhere in project.yml or the Xcode project.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Release: v0.4.10 — fix sidebar selection flicker/ghost boxes

Bump MARKETING_VERSION 0.4.9 -> 0.4.10 (build 13/11). Ships the in-place
tree reconcile that stops the sidebar List from being torn down on every
filesystem event, fixing selection flicker and ghost highlight boxes on
busy sources like ~/.claude.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Release: v0.4.9 — async source detection (faster launch)

Bump MARKETING_VERSION 0.4.8 -> 0.4.9 (build 12/10). Ships the async
source-detection change so launch — and the double-click-a-.md fast
path — is no longer blocked by synchronous directory scans, plus the
iOS build fix.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

v0.4.8 — Qwen Code + Kimi CLI auto-discovery

v0.4.7 — .mdx support + Suggested Rules WIP