Fix packaged settings and macOS ARM64 launch

[ccofallen]

Summary

• keep the complete app shell in packaged settings windows while opening Settings by default
• hide the duplicate pet and keep the settings renderer lifecycle passive
• repair the invalid macOS ARM64 linker signature with a scoped deep ad-hoc signing hook
• bump the patch release to 0.2.1 and make release-artifact CLI tests version-aware

Root causes

• hidePet=1 was incorrectly treated as a standalone Settings renderer, so every packaged platform showed only the Settings page instead of the complete website-style shell.
• the ARM64 bundle contained an incomplete linker signature; the DMG checksum was valid, but codesign --deep --strict failed and Gatekeeper reported the app as damaged.

Verification

• full desktop release gate passed
• 693 unit tests passed
• 40 Playwright E2E tests passed
• 27 workflow tests passed
• 17 artifact tests passed
• actual ARM64 DMG checksum passed
• actual ARM64 app passed strict deep codesign validation
• quarantined ARM64 app launched without the damaged-file error
• actual packaged settings window visually verified with full navigation, Settings selected, and no duplicate pet