docs: drop the "First launch: trusting an unsigned build" section from READMEs

Per maintainer preference — keep the README focused on what the app is and
how to set it up, not on the OS-trust quirks of unsigned distributables.
The same information will surface on the Release page / Issues when needed.

Co-Authored-By: Claude Opus 4 (1M context) <noreply@anthropic.com>

Author: 2 people

README.md

@@ -118,30 +118,6 @@ Paste your API key → **Test connection** → **Save**.
 
 ---
 
-## First launch: trusting an unsigned build
-
-EchoWise releases are **ad-hoc code-signed** but **not** notarized or signed with a paid Apple/Microsoft developer certificate (the project is funded by no one). On a fresh install your OS will show a one-time security prompt. This is expected — the steps below clear it for good.
-
-### macOS
-
-After dragging EchoWise into `/Applications`, **right-click → Open** the very first time (do **not** double-click). Gatekeeper will warn that the developer is "unidentified" and offer an **Open** button — click it. From the second launch onward it opens normally.
-
-If you instead see `"EchoWise.app" is damaged and can't be opened. You should move it to the Trash`, run this once in Terminal:
-
-```bash
-xattr -cr /Applications/EchoWise.app
-```
-
-That clears the macOS "quarantine" flag added by your browser when it downloaded the `.dmg`. The app is fine — the message just means the OS has never seen this developer signature before.
-
-### Windows
-
-The first time you run `EchoWise.msi` (or the installed `.exe`), **Windows SmartScreen** may show a blue banner that says "Windows protected your PC". Click **More info → Run anyway**. After install, SmartScreen will not prompt again.
-
-This warning will appear until enough users have installed the build for Microsoft's reputation system to trust it; bypassing it permanently requires a paid EV code-signing certificate.
-
----
-
 ## Where data lives
 
 Everything stays on **your** machine — nothing is uploaded.

README.zh.md

@@ -118,30 +118,6 @@ npm run build
 
 ---
 
-## 首次启动：信任未公证的安装包
-
-EchoWise 的发布版本经过 **ad-hoc 自签名**，但**未做**苹果/微软付费证书的公证或代码签名（项目目前没有任何资金来源）。第一次安装时操作系统会弹一次性的安全提示——按下面步骤处理后续就再不会出现。
-
-### macOS
-
-把 EchoWise 拖进 `/Applications` 后，**第一次** 启动时**右键点 → 打开**（不要双击）。Gatekeeper 会提示"无法验证开发者"，但会显示一个 **打开** 按钮——点它。第二次起就能正常双击打开。
-
-如果看到的是 **"EchoWise.app" 已损坏，无法打开。您应该将它移到废纸篓**，在终端跑一次：
-
-```bash
-xattr -cr /Applications/EchoWise.app
-```
-
-这是清除浏览器下载 `.dmg` 时打上的 macOS "quarantine" 标记。应用本身没坏——这条提示只是说系统第一次见到这个开发者签名。
-
-### Windows
-
-第一次跑 `EchoWise.msi`（或安装后的 `.exe`），**Windows SmartScreen** 可能弹出蓝色的"Windows 已保护你的电脑"。点 **更多信息 → 仍要运行**。装完之后 SmartScreen 不会再问。
-
-这个警告会一直出现，直到足够多的用户安装并让 Microsoft 的信誉系统认识它为止；想永久免除提示需要付费购买 EV 代码签名证书。
-
----
-
 ## 数据存储
 
 EchoWise 所有数据在**你的机器上**，不上传任何地方。