fix: add audio-input entitlement for microphone access in packaged app

Root cause: Hardened Runtime blocks microphone access without explicit
com.apple.security.device.audio-input entitlement. The app never appeared
in macOS Microphone privacy list because the OS silently denied the request.

- Added build/entitlements.mac.plist with audio-input entitlement
- Configured electron-builder to use entitlements for both main and child processes
- Improved mic permission flow: opens System Settings when previously denied

Author: nicremo

build/entitlements.mac.plist

@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>com.apple.security.cs.allow-jit</key>
+  <true/>
+  <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+  <true/>
+  <key>com.apple.security.cs.disable-library-validation</key>
+  <true/>
+  <key>com.apple.security.device.audio-input</key>
+  <true/>
+</dict>
+</plist>

package.json

@@ -39,6 +39,8 @@
         "dmg",
         "zip"
       ],
+      "entitlements": "build/entitlements.mac.plist",
+      "entitlementsInherit": "build/entitlements.mac.plist",
       "extendInfo": {
         "NSMicrophoneUsageDescription": "OpenWhisp needs microphone access to transcribe your speech locally."
       }