Give both ways past the first-launch warning

.github/workflows/desktop.yml

@@ -57,7 +57,16 @@ jobs:
           projectPath: apps/desktop
           tagName: ${{ github.ref_name }}
           releaseName: 'Theseus for Mac ${{ github.ref_name }}'
-          releaseBody: 'Download the .dmg and drag Theseus to Applications. It is not notarized by Apple, so see the README for how to allow the first launch: xattr -dr com.apple.quarantine "/Applications/Theseus.app"'
+          releaseBody: |
+            Download the .dmg and drag Theseus to Applications. Theseus isn't notarized by Apple, so macOS blocks the first launch. There are two ways to allow it. Apple says to do this only for an app you trust.
+
+            **System Settings:** try to open Theseus once and close the warning. Then go to **System Settings → Privacy & Security**, scroll down, click **Open Anyway**, and click **Open** when the warning comes back.
+
+            **Or Terminal:** this lifts the block for Theseus only.
+
+            ```
+            xattr -dr com.apple.quarantine "/Applications/Theseus.app"
+            ```
           releaseDraft: false
           prerelease: false
           args: --target universal-apple-darwin

README.md

@@ -94,16 +94,16 @@ A menu bar app that keeps everything running: Remote Control, the checks and you
 It's also the nicest way to work your list. Drag things into order, check them off with a few seconds to change your mind, or edit it as plain Markdown. It saves as you go, with undo. Activity shows your thread notes, and Setup lists every command.
 
 1. Download the `.dmg` from [Releases](https://github.com/ExtantApe/theseus/releases/latest) and drag Theseus to Applications.
-2. Apple charges for notarizing and Theseus is free, so it isn't notarized and macOS blocks the first launch. There are two ways to allow it:
+2. Apple charges for notarizing and Theseus is free, so it isn't notarized and macOS blocks the first launch. There are two ways to allow it. Apple says to do this only for an app you trust.
 
-   **Terminal (quickest):**
+   **System Settings:** try to open Theseus once and close the warning. Then go to **System Settings → Privacy & Security**, scroll down, click **Open Anyway**, and click **Open** when the warning comes back.
+
+   **Or Terminal:** this lifts the block for Theseus only.
 
    ```bash
    xattr -dr com.apple.quarantine "/Applications/Theseus.app"
    ```
 
-   **Or System Settings:** open the app and dismiss the warning, then go to **System Settings → Privacy & Security**, scroll down, and choose **Open Anyway**.
-
 Requires macOS 14 or later, on Apple silicon or Intel, and Apple's command line tools (`xcode-select --install`).
 
 Do the install above first, since the app runs that copy of Theseus. Then open it, allow what's listed on its Setup tab, and click **Run from this app…** there. After that it opens at login and reopens after a crash.

docs/APP-PLAN.md

@@ -97,7 +97,7 @@ iPhone Shortcut instructions (optional) → `/migrate` (shown as a guided review
 ## 5. Shipping
 - **One repo, one release:** GitHub Releases attach `Theseus.dmg` (the app with the engine inside) plus the plugin marketplace files
   (for Claude Code users). Same version number for both.
-- **Before notarization:** unsigned builds with clear "Open Anyway" instructions (docs/SETUP.md §11), or build from source in Xcode.
+- **Before notarization:** builds with clear "Open Anyway" and Terminal instructions (README and docs/SETUP.md), or build from source in Xcode.
 - **Later (optional):** an Apple Developer ID for signing and notarization ($99/yr). Only if enough people want one-click installs.
 - **Updates:** Tauri updater + `latest.json` on GitHub Releases, signed with the updater key (as in OnePedigree). Engine-only updates can ship without a new app binary.
 - **Uninstall:** Settings → "Remove Theseus" unregisters the agent and leaves the workspace in place (or exports, then deletes it, if the user chooses).

docs/SETUP.md

@@ -257,16 +257,16 @@ A menu bar app that hosts Remote Control, the change checks and your briefings,
 It runs the engine in your workspace, so install Theseus first.
 
 1. Download the `.dmg` from [Releases](https://github.com/ExtantApe/theseus/releases/latest) and drag Theseus to Applications.
-2. Theseus is free and isn't notarized by Apple (Apple charges for that), so macOS blocks the first launch. Allow it one of two ways:
+2. Theseus is free and isn't notarized by Apple (Apple charges for that), so macOS blocks the first launch. There are two ways to allow it. Apple says to do this only for an app you trust.
 
-   **Terminal (quickest):**
+   **System Settings:** try to open Theseus once and close the warning. Then go to **System Settings → Privacy & Security**, scroll down, click **Open Anyway**, and click **Open** when the warning comes back.
+
+   **Or Terminal:** this lifts the block for Theseus only.
 
    ```bash
    xattr -dr com.apple.quarantine "/Applications/Theseus.app"
    ```
 
-   **Or System Settings:** open the app and dismiss the warning, then go to **System Settings → Privacy & Security**, scroll down, and choose **Open Anyway**.
-
 Requires macOS 14 or later, on Apple silicon or Intel, and Apple's command line tools (`xcode-select --install`).
 
 Only do this for builds from this repo's official releases. Never disable Gatekeeper system-wide.