fix: add missing window control permissions and dmg build target

Window close/minimize/maximize buttons were non-functional in production
builds because core:window:allow-close, core:window:allow-minimize, and
core:window:allow-toggle-maximize permissions were not committed.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

fix: add missing M3 surface-container and inverse tokens for proper t…

…heme adaptation

Dialog components (md-dialog) were showing light backgrounds in dark mode because
surface-container-high token was missing. Toast notifications also used surface-variant
instead of M3 Snackbar's inverse-surface pattern. Added missing M3 tokens and fixed
hardcoded color (#146c2e) to use theme variable.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

fix: use recursive glob for release artifact matching

Artifacts are uploaded with directory structure preserved, so
files end up in subdirectories. Use **/*.ext patterns to match
them regardless of nesting depth.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

fix: add write permissions to release workflow

Co-Authored-By: Claude Opus 4.6 <[email protected]>

fix: correct npm script argument passing for tauri build

Add `--` to properly pass build arguments through npm to tauri CLI

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Initial commit: Claude Code settings manager with multi-provider support