Phase 0: menu-bar scaffold, permissions, backend health check

Native SwiftUI menu-bar app (LSUIElement, macOS 13+), generated from project.yml
via XcodeGen. Includes:
- PermissionsManager (Microphone / Screen Recording / Accessibility) + UI
- SparkControlHealth: GET /api/status over self-signed TLS (InsecureTrustDelegate)
- AppSettings persistence (host, TLS-skip, output folder, adapter toggles)
- Menu-bar panel + Settings, app sandbox & hardened runtime off (LAN tool)

project.yml

@@ -0,0 +1,49 @@
+name: Ten31Transcripts
+
+options:
+  bundleIdPrefix: xyz.ten31
+  deploymentTarget:
+    macOS: "13.0"
+  createIntermediateGroups: true
+  groupSortPosition: top
+
+settings:
+  base:
+    MARKETING_VERSION: "0.1.0"
+    CURRENT_PROJECT_VERSION: "1"
+    SWIFT_VERSION: "5.0"
+    CODE_SIGN_STYLE: Automatic
+    # Leave the team empty; pick your free personal team in Xcode's
+    # Signing & Capabilities tab on first open (see README).
+    DEVELOPMENT_TEAM: ""
+
+targets:
+  Ten31Transcripts:
+    type: application
+    platform: macOS
+    sources:
+      - path: Ten31Transcripts
+    settings:
+      base:
+        PRODUCT_NAME: Ten31Transcripts
+        PRODUCT_BUNDLE_IDENTIFIER: xyz.ten31.transcripts
+        INFOPLIST_FILE: Ten31Transcripts/Support/Info.plist
+        CODE_SIGN_ENTITLEMENTS: Ten31Transcripts/Support/Ten31Transcripts.entitlements
+        GENERATE_INFOPLIST_FILE: NO
+        ENABLE_HARDENED_RUNTIME: NO
+        MACOSX_DEPLOYMENT_TARGET: "13.0"
+    scheme:
+      testTargets:
+        - Ten31TranscriptsTests
+
+  Ten31TranscriptsTests:
+    type: bundle.unit-test
+    platform: macOS
+    sources:
+      - path: Ten31TranscriptsTests
+    settings:
+      base:
+        PRODUCT_BUNDLE_IDENTIFIER: xyz.ten31.transcripts.tests
+        GENERATE_INFOPLIST_FILE: YES
+    dependencies:
+      - target: Ten31Transcripts