Finish menu-bar lifecycle and remaining branch reconciliation #19

Problem

Issue #1 is complete, but three unmerged visual-core/menu-bar commits remain. The original checkout also has allowance edits that must be reconciled without regressing newer Claude grant support.

Scope

Integrate the owner-selected native command menu (direction A), maintain current window styling and CI tooling, and qualify close/reopen/refresh/quit behavior. The local allowance additions are already on main; preserve the original checkout. No deployment or release.

Acceptance

• Integrate only the useful shared visual controls and menu lifecycle code; exclude stale CI pins and unused notification helpers.
• Context-only refresh, accurate menu states, successful-refresh timestamp and quit review for ongoing model work.
• Focused/full Swift tests, optimized build, rendered native window coverage and interactive fixture lifecycle checks.
• Complete Fleet design receipt, merge after CI, document branch reconciliation and preserve unrelated local work.

Completion evidence · 5 October 2026

Implemented in PR #20, source c07ac032bfd24c4fc2f73f5e6e239fb783543a04.

• Owner selected A, the native command menu. Current title bar and immutable CI tooling remain intact.
• Shared palette/control helpers preserve existing appearance. Older CI pin and unused notification helpers were excluded.
• Context-only refresh, explicit never-scanned/running/failed/ready states, retained last-success timestamp, and quit review including the full refresh's finishing phase are covered.
• 26 native/model tests and 138 core tests passed locally, with the existing opt-in snapshot test skipped. Optimized build and Fleet v2 preflight/completion passed. Fresh source renders cover 960×640, 1180×740 and 1440×900.
• Synthetic interactive fixture verified Open, main-window close, disabled duplicate refresh, retained timestamp, Keep Running and Quit Anyway. The native status item could not be inspected by the tool without an open window; a test-only window exposed the unchanged menu body for command checks. The quit alert was verified by its AX dialog/actions; its captured image was blank and is not rendered proof. The fixture is excluded from production.
• Local allowance additions are already on main, which also has newer Claude grant support. The original checkout, historical menu branch, patch-equivalent branches and old inherited sweep history were preserved. No original checkout reset or branch deletion occurred.

docs/project-reconciliation.md records the integration and limits. Private local rendered evidence and the Fleet v2 receipt remain in the managed reconciliation worktree. The public landing was re-inspected; prior download/notarization/Skills handoff evidence is retained separately. No deployment, release or installed-app replacement occurred, and the original installed process remains running.

Merged to main as 53c4de5253f617b3f397667b6b9b77b265149ba1. All three GitHub CI checks passed: native tests/release build, shared candidate and site.