Fix release audit findings

[hazennik]

Summary

• fail closed on incomplete scans and revalidate filesystem identity, complete size, open files, and current simulator state before every cleanup mutation
• make Documents access explicitly opt-in and persistent after a successful user-initiated grant; replace raw path fields with validated system pickers
• surface cleanup failure details, update preferences/install-and-relaunch, launch at login, Modern as the default, and an unchanged menu-bar icon across themes
• strengthen UI, Intel/Apple Silicon, and universal macOS 14 release verification; refresh user, safety, release, and screenshot documentation

Safety

• No permanent delete path added.
• Cleanup still uses Trash or approved simctl actions.
• Active simulators remain protected.
• Docs updated if safety behavior changed.
• No personal signing identity or Team ID committed.
• Privacy-sensitive behavior reviewed if new paths, process data, or metadata are read.

Safety impact: cleanup is more conservative. Incomplete or changed filesystem objects now fail final validation, and simulator state is fetched immediately before each simulator mutation. No new data leaves the Mac.

Validation

• make lint
• make workflow-check
• make repository-check
• make docs-check
• make icon-check
• make homebrew-check
• make script-test
• make test
• make swift-test
• make analyze
• make cli-dry-run
• make package-check
• make appcast-check
• make spark-sign-check
• make ui-test when UI launch behavior changed