Auto-update now actually installs. The release tarball contained macOS AppleDouble (._*) metadata files that the updater's unpacker choked on — so updates downloaded but never applied. The tarball is now packaged clean (COPYFILE_DISABLE + --no-mac-metadata). Verified end-to-end: a 0.9.2 build auto-updated to 0.9.4 (download → install OK → bundle replaced).
Cumulative with 0.9.3 (model picker), 0.9.2 (chat CSP), 0.9.1 (relaunch), 0.9.0 (agent chat).
⚠️ Install this build manually one last time — earlier tarballs can't self-install. From 0.9.4 onward, in-app updates work.