Remove security-reducing macOS settings and fix shell configs

- Remove AutomaticCheckEnabled, AutoUpdate, and LSQuarantine
  settings that disable security features
- Move Homebrew initialization out of .zprofile
- Fix history function to properly handle multiline entries

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: fumiya-kume

home/.zprofile

@@ -1,10 +1,3 @@
-# Homebrew
-if [[ -x /opt/homebrew/bin/brew ]]; then
-  eval "$(/opt/homebrew/bin/brew shellenv)"
-elif [[ -x /usr/local/bin/brew ]]; then
-  eval "$(/usr/local/bin/brew shellenv)"
-fi
-
 # PATH additions
 export PATH="/Library/TeX/texbin:$PATH"
 export PATH="$HOME/Library/Application Support/JetBrains/Toolbox/scripts:$PATH"

home/.zshrc

@@ -61,7 +61,7 @@ h() {
   emulate -L zsh
   local selected src
   src=$(builtin fc -ln 1 2>/dev/null) || return
-  selected=$(printf '%s\n' $src | awk '{a[NR]=$0} END{for(i=NR;i>=1;i--)if(!seen[a[i]]++)print a[i]}' | peco) || return
+  selected=$(printf '%s\n' "${(f)src}" | awk '{a[NR]=$0} END{for(i=NR;i>=1;i--)if(!seen[a[i]]++)print a[i]}' | peco) || return
   [[ -z "$selected" ]] && return
   print -s -- "$selected"
   echo "+ $selected"

scripts/setup-macos.sh

@@ -1,6 +1,4 @@
 defaults write com.apple.finder AppleShowAllFiles TRUE
-defaults write com.apple.SoftwareUpdate AutomaticCheckEnabled -bool false
-defaults write com.apple.commerce AutoUpdate -bool false
 defaults write NSGlobalDomain AppleShowAllExtensions -bool true
 defaults write com.apple.finder QLEnableTextSelection -bool true
 defaults write com.apple.desktopservices DSDontWriteNetworkStores -bool true
@@ -10,7 +8,6 @@ defaults write com.apple.dock autohide -bool true
 defaults write NSGlobalDomain NSNavPanelExpandedStateForSaveMode -boolean true
 defaults write com.apple.driver.AppleBluetoothMultitouch.trackpad TrackpadThreeFingerDrag -bool true && \
 defaults write com.apple.AppleMultitouchTrackpad TrackpadThreeFingerDrag -bool true
-defaults write com.apple.LaunchServices LSQuarantine -bool false 
 defaults write com.apple.dock static-only -bool true
 defaults write com.apple.TextEdit RichText -int 0
 sudo chflags nohidden /Volumes