[asgarihope]

Summary

• macOS About downloads the signed disk image and opens it. BiFlow does not replace /Applications/BiFlow.app, pause the tunnel, or quit. The new version starts after the operator drags BiFlow onto Applications, quits the menu-bar process, and opens that Applications copy.
• The menu bar speed label no longer resizes every second, which could freeze the status item until force quit. The tray menu rebuilds on the main thread only when the phase or busy flag changes.
• The release disk image keeps the Applications alias, including the non-GUI retry, so installation is a drag onto Applications.
• The macOS-only update result is compiled only on macOS, so Linux and Windows Clippy stay clean. rustls-webpki, tokio, webpki-roots, and webpki-root-certs are updated past the current RustSec advisories.
• This branch is based on current main and merges with no conflicts. Version is 6.2.79.

Test plan

• macOS update opens the verified disk image and does not generate an administrator replace script
• A disk-image update does not pause the stack or schedule an exit
• Menu bar digit changes update the title only; identical text does not touch AppKit
• The disk-image fallback still passes --app-drop-link
• cargo test -p iran-split-desktop, workspace Clippy with warnings denied, cargo fmt --all --check, pnpm check, and pnpm build
• Merge of this branch into main is clean
• On a Mac running an older build, About → Download opens the disk image, the current BiFlow stays running, and the new version starts only after quitting the menu-bar process and opening the Applications copy