v0.4.9

Packaging correction over engine v0.4.8.

The app declared macOS 13 while its bundled interpreter refuses to load
below 15.4, so on macOS 13 or 14 it would open and its engine would never
start. The minimum is now the truth, and a build check fails whenever the
two drift apart.

Signing is inside-out: every Mach-O, then framework versions, then nested
bundles, then the app. Four notarization rejections came from containers
never being re-sealed after their contents were signed.