First run is now a real setup, not a slideshow

Onboarding became a five step wizard that actually configures Orb: pick your agent (Claude Code or Codex), pick the folder you work in, learn the shortcuts, and finish inside a live first session where your agent says hello to you.
The agent page checks your setup while you choose: signed in, installed but signed out, or missing, with the exact install command when something is off. Re-check re-probes live.
The shortcuts page teaches the summon key Orb actually registers, plus Cmd+N for a new session and Option+Up / Option+Down to move between sessions.
Your choices are written to the Home profile, so the first session starts your agent in your real project folder. You can replay the whole setup any time from Settings, Advanced, Show onboarding again.

Reliability fixes

Sessions and settings now survive downgrades: data written by a newer version degrades gracefully instead of wiping what was saved.
A session you deleted can no longer come back as a ghost Recovered session after quitting right away.
Smoother under the hood: faster command lookups off the main thread, two rare hangs fixed, and VoiceOver can now close a running session row.

A full security audit of the app, the website, and the release pipeline led to hardening fixes across the board.