feat(macos): local ASR model manager, menu-bar polish, and release 0.5.2

Adds a bundled local ASR model catalog for the macOS app with one-click
Sherpa Qwen3 / SenseVoice downloads (pause/resume, inline actions) and a
shared model storage directory used by MLX Qwen3. Fixes the light-mode
sidebar material and makes the menu-bar icon follow the system appearance
with a refreshed status mark. Renames the built product to OSGKeyboard.app.

Bumps version to 0.5.2 (build 19).

project.yml

@@ -50,8 +50,8 @@ settings:
     ASSETCATALOG_COMPILER_GENERATE_SWIFT_ASSET_SYMBOL_EXTENSIONS: YES
     STRING_CATALOG_GENERATE_SYMBOLS: YES
     CLANG_CXX_LANGUAGE_STANDARD: c++17
-    MARKETING_VERSION: "0.5.0"
-    CURRENT_PROJECT_VERSION: "18"
+    MARKETING_VERSION: "0.5.2"
+    CURRENT_PROJECT_VERSION: "19"
     # 签名配置来自 Signing.local.xcconfig（gitignored，不会被覆盖）
 
 # 项目级签名 xcconfig，适用于所有 target
@@ -327,6 +327,7 @@ targets:
     resources:
       - path: OSGKeyboardShared/Resources/CustomLanguageModel/v1/OSGKeyboardCLM.bin
       - path: OSGKeyboardShared/Resources/CustomLanguageModel/v1/compiled-manifest.json
+      - path: OSGKeyboardShared/Resources/LocalASR/local-asr-catalog.json
     info:
       path: OSGKeyboardShared/Info.plist
     settings:
@@ -429,10 +430,18 @@ targets:
         buildPhase: resources
       - path: OSGKeyboardShared/zh-Hans.lproj/Shared.strings
         buildPhase: resources
+      - path: OSGKeyboard/Resources/CustomLanguageModel/v1/phrases.tsv
+        buildPhase: resources
+      - path: OSGKeyboardShared/Resources/LocalASR/local-asr-catalog.json
+        buildPhase: resources
     entitlements:
       path: OSGKeyboardMac/OSGKeyboardMac.entitlements
       properties:
-        com.apple.security.app-sandbox: true
+        # Sandbox disabled on purpose: this menu-bar dictation utility uses the
+        # Accessibility API to monitor a global hotkey and inject ⌘V into other
+        # apps — both are forbidden by App Sandbox. Ship via Developer ID +
+        # notarization (not Mac App Store / TestFlight, which force the sandbox).
+        com.apple.security.app-sandbox: false
         com.apple.security.device.audio-input: true
         com.apple.security.network.client: true
         com.apple.developer.ubiquity-kvstore-identifier: $(TeamIdentifierPrefix)com.osgkeyboard.ios
@@ -455,6 +464,9 @@ targets:
         ITSAppUsesNonExemptEncryption: false
     settings:
       base:
+        PRODUCT_NAME: OSGKeyboard
+        INFOPLIST_KEY_CFBundleDisplayName: OSGKeyboard
+        INFOPLIST_KEY_CFBundleName: OSGKeyboard
         PRODUCT_BUNDLE_IDENTIFIER: com.osgkeyboard.mac
         MACOSX_DEPLOYMENT_TARGET: "15.0"
         ASSETCATALOG_COMPILER_APPICON_NAME: AppIcon
@@ -462,6 +474,8 @@ targets:
         APPLICATION_EXTENSION_API_ONLY: NO
         CODE_SIGN_STYLE: Automatic
         DEVELOPMENT_TEAM: X329MZU23S
+        # Required for Developer ID distribution + notarization (outside App Store).
+        ENABLE_HARDENED_RUNTIME: YES
     dependencies:
       - sdk: Speech.framework
       - sdk: AVFoundation.framework