2b39b885d6
macos gains the desktop-installer@latest install method: the website's Hermes-Setup.dmg (verified live), mounted with hdiutil and its app binary run DIRECTLY - an open-launched app inherits none of the git redirect env, so direct exec is what keeps the isolation honest while staying the same binary and first-launch flow. install-e2e-macos-run.yml takes the windows shape: one workflow, one inner job per driver arm, native skips. Arm 1 delegates script installs to the shared OS-agnostic run workflow; arm 2 stages, installs from the dmg, and drives both app-update methods through launch-from-spec.mjs - open-app-update launches the installed .app (the double-click surface, env via Playwright), hermes-desktop-app-update captures the product's own hermes desktop spawn. Both end on sha asserts, never version strings.