Show "Ness" instead of "harness" in the macOS app menu (#300)

## Problem

The macOS app menu's items read **"About harness"**, **"Hide harness"**,
and **"Quit harness"**.

The menu bar *title* is already correct ("Ness") because macOS takes
that from `CFBundleName`, which electron-builder sets from
`build.productName`. But the submenu items come from `app.name`, which
Electron derives from `package.json`'s top-level `"name"` — still
`"harness"`.

## Why not just rename the package

`package.json`'s `"name": "harness"` is load-bearing, and CLAUDE.md
documents it. `app.getName()` keys **both**:

- the userData directory (`~/Library/Application Support/harness`), and
- the macOS Safe Storage keychain item (service `harness Safe Storage`,
account `harness Key`).

The filesystem is case-insensitive but **the keychain is not**, so
renaming the package — or calling `app.setName('Ness')` at boot — would
break `safeStorage` decryption of `secrets.enc` (GitHub PAT, backend
tokens) with *"A keychain can not be found to store …"*. Same reasoning
that keeps `build.appId` at `org.mikelyons.harness`.

So the fix is explicit labels, not a rename.

## The change

All in `src/main/desktop-shell.ts`:

- New module-level `APP_DISPLAY_NAME = 'Ness'` constant, with a "why"
comment noting it is deliberately **not** `app.name`.
- `buildMenu()`: explicit labels on `about`, `hide`, and `Quit` (and the
app-menu `label`, which macOS ignores in favor of `CFBundleName` but is
kept consistent). `hideOthers` / `unhide` need no change — they render
"Hide Others" / "Show All" with no app name.
- `app.setAboutPanelOptions({ applicationName, applicationVersion })` on
darwin at ready, so the About *dialog* behind the menu item stops
showing "harness" too.

No behavior outside the menu changes; `app.name` is untouched everywhere
it matters (paths, keychain).

## Verification

- `npm run typecheck` — clean
- `npx electron-vite build` — clean
- `npx vitest run` — 2987 tests / 227 files pass
- Menu confirmed visually by @blindpirate in a dev build

One note for reviewers: this machine's C++ toolchain can't build
`node-pty` (a bare `#include <functional>` fails system-wide), so the
dev app runs but PTY spawns fail with `posix_spawnp failed`. That's a
pre-existing local environment issue, unrelated to this change, and it
doesn't affect the menu.

_PR opened on behalf of @blindpirate by Claude via
[Ness](https://github.com/ness-dev/ness)._

Author: blindpirate

src/main/desktop-shell.ts

@@ -68,6 +68,12 @@ export interface DesktopShellEarlyHandle {
   transport: ElectronServerTransport
 }
 
+/** User-facing product name. Deliberately NOT `app.name` — package.json's
+ *  `name` stays "harness" because it keys the userData directory and the
+ *  macOS Safe Storage keychain item (see CLAUDE.md), so renaming it or
+ *  calling `app.setName()` would break secrets.enc decryption. */
+const APP_DISPLAY_NAME = 'Ness'
+
 /** Where the web-client bundle lives at runtime. Differs between
  *  packaged builds (asar-relative) and dev / unpacked (sibling of the
  *  main bundle output). Lives here so index.ts doesn't need to call
@@ -411,17 +417,17 @@ export function startDesktopShell(deps: DesktopShellStartDeps): DesktopShellStar
   function buildMenu(): void {
     const template: Electron.MenuItemConstructorOptions[] = [
       {
-        label: app.name,
+        label: APP_DISPLAY_NAME,
         submenu: [
-          { role: 'about' },
+          { role: 'about', label: `About ${APP_DISPLAY_NAME}` },
           { type: 'separator' },
           {
             label: 'Settings…',
             accelerator: 'CmdOrCtrl+,',
             click: () => transport.sendSignal('app:openSettings')
           },
           { type: 'separator' },
-          { role: 'hide' },
+          { role: 'hide', label: `Hide ${APP_DISPLAY_NAME}` },
           { role: 'hideOthers' },
           { role: 'unhide' },
           { type: 'separator' },
@@ -444,7 +450,7 @@ export function startDesktopShell(deps: DesktopShellStartDeps): DesktopShellStar
           // AND keyup) flows to our handlers, where the hold gesture lives.
           // Menu click still quits immediately.
           {
-            label: `Quit ${app.name}`,
+            label: `Quit ${APP_DISPLAY_NAME}`,
             click: () => app.quit()
           }
         ]
@@ -802,6 +808,12 @@ export function startDesktopShell(deps: DesktopShellStartDeps): DesktopShellStar
         log('app', 'failed to set dock icon', err instanceof Error ? err.message : err)
       }
     }
+    if (process.platform === 'darwin') {
+      app.setAboutPanelOptions({
+        applicationName: APP_DISPLAY_NAME,
+        applicationVersion: app.getVersion()
+      })
+    }
     buildMenu()
     void runBoot()
     createWindow()