Document unsigned desktop install notes

[dev-ik]

Summary

Type of Change

• Bug fix
• Feature
• Documentation
• Refactor or maintenance
• Security hardening

Testing

• npm run lint
• npm run typecheck
• npm run test
• npm run test:sdk-smoke
• npm run build

Security Checklist

• No secrets, auth headers, cookies, request bodies, or response bodies are logged.
• No new raw HTML or code execution sinks were introduced.
• URL, proxy, import, and request execution changes preserve SSRF and public demo restrictions.
• Untrusted OpenAPI specs, cURL input, URLs, localStorage values, and network responses are validated or safely rendered.

Notes for Reviewers