Add onboarding, permissions, language, and minimal settings

[douglasjarquin]

Summary

• Add a seven-step first-run onboarding flow with support gating, supported speech locales/assets, contextual microphone and Accessibility permission recovery, shortcut conflict validation, Oigo-owned test dictation, and History recovery guidance.
• Add persisted v1 settings, public SMAppService.mainApp launch-at-login control, final menu-bar commands, and a nonactivating bounded/throttled dictation HUD.
• Preserve raw/audio lifecycle, retry, retention, insertion, Clean fallback, and copy-only behavior from issues [01/13 · Feasibility] Validate the native on-device dictation pipeline #2 through [07/13 · Intelligence] Add optional on-device transcript cleanup with raw fallback #8.
• Add deterministic issue [08/13 · Product] Add onboarding, permissions, language, and minimal settings #9 contract coverage and compatibility annotations for the macOS 13 launch floor.

Closes #9

Validation

• Swift source builds and contract suites pass for the spike and issues [02/13 · MVP] Build the native menu-bar shell and dictation state machine #3 through [08/13 · Product] Add onboarding, permissions, language, and minimal settings #9 with DEVELOPER_DIR=/Applications/Xcode.app/Contents/Developer.
• Native Xcode build passes with explicit DEVELOPER_DIR, and ONLY_ACTIVE_ARCH=NO produces a universal arm64/x86_64 app.
• LSP diagnostics report zero errors for Sources and Tests.
• AppKit QA captured onboarding, settings persistence, speech-assets ready state, contextual microphone TCC prompt, shortcut rejection, Accessibility copy-only recovery, and unsupported Intel launch screenshots.
• The host CoreAudio service blocked one live recording attempt inside AVAudioEngine.inputNode; no new Oigo crash report was produced, and no non-empty transcript is claimed without spoken input.