fix(macos): clear stale permission rows and offer one-click recovery (#715) * fix(macos): clear stale permission rows and offer one-click recovery * test(rune_ui): add Linux goldens for stale permission rows * refactor(rune_ui): keep rune_ui.rs under code-shape ceiling |