feat(mac): copy generated passwords from the dialog, and say less to ask more

[dvcdsys]

The password is one click from the clipboard

Both the first-run wizard and Reset Password… show a generated credential
that has to be typed into a browser. Ab3-xY_9kQ is exactly the thing people
mistype.

AppleScript cannot make a run of text clickable — display dialog draws one
static string — so the click target is a button. The dialog re-shows after
copying rather than dismissing: a password displayed once is what someone
reaches for twice, and a window that vanishes on the first attempt is how
credentials end up being read off a screenshot.

The value reaches the clipboard through a pipe to pbcopy, not through
AppleScript's set the clipboard to, which would place a secret inside a
script string — one quoting mistake from being interpreted.

The wizard leads with the instruction

Before:

cix needs an administrator account before it can start.

Enter the email address to sign in with. A password will be generated for you,
and you will be asked to change it the first time you log in.

Setup then downloads the cix server itself — around 40 MB — which takes a moment.

After:

Enter an email address for the administrator account.

It is the login for the cix dashboard on this Mac — nothing is sent anywhere.
A password is generated for you, and setup then downloads the server (about 40 MB).

It opened with why and buried what to do in the second paragraph, which
reads like a sign-up form — and left unanswered the question everybody asks:
where is my address going. Nowhere.

Gatekeeper: two blocks, not one

doc/MACOS_APP.md and the release body promised a single trip to System
Settings. There are two — the downloaded disk image is refused when opened, and
the app is refused again on first launch, because it inherits the quarantine
flag from the image it was dragged out of.

Confirmed on a genuinely quarantined build: spctl -a -t open rejects the image
whether or not it carries the flag, so the flag only decides whether that
verdict is enforced. Both documents now say so, and both tell people to choose
Done rather than Move to Bin.

🤖 Generated with Claude Code