fix: request macOS microphone consent from the app bundle

[finalflash159]

Root cause

The desktop bundle had a microphone usage description but its signature omitted the macOS Audio Input entitlement. macOS therefore did not register SoCa in the Microphone privacy service.

Fix

• Sign the macOS app with the Audio Input entitlement.
• Dispatch the AVFoundation request on Tauris native main thread and await its callback off-thread.
• Verify the entitlement in the packaging contract and in the final signed macOS app during package CI.

Local verification

• Desktop suite: 262 passed.
• Rust suite: 5 passed.
• Microphone bundle contract: 2 passed.
• Full local macOS app build passed codesign verification and contains com.apple.security.device.audio-input=true.

[qodo-code-review]

ⓘ Qodo reviews are paused because the subscription is no longer active. Ask your workspace admin to reactivate the subscription to resume reviews. Manage billing