Closes#135.Closes#142.This PR adds an optional privileged `LaunchDaemon` capable of removing the quarantine flag on a downloaded `.dylib` without prompting the user to enter their password. This is most useful when the Coder deployment updates frequently.<img width="597" alt="image" src="https://github.com/user-attachments/assets/5f51b9a3-93ba-46b7-baa3-37c8bd817733" />The System Extension communicates directly with the `LaunchDaemon`, meaning a new `.dylib` can be downloaded and executed even if the app was closed, which was previously not possible. I've tested this in a fresh 15.4 VM.

Closes#159.https://github.com/user-attachments/assets/26391aef-31a1-4d5a-8db0-910a9fbe97ea

Also switches all the stock ProgressViews to our new CircularProgressViewhttps://github.com/user-attachments/assets/7d800856-5dc3-4ae2-8193-41debbf676bdhttps://github.com/user-attachments/assets/c6a953b4-c14f-437c-8e02-2c21348386e7

First PR for#47.To test the later components, we need a release build and a preview build signed with this key. So, this needs to be merged first.I've tested the release script with a dry-run, and validated the pkg passes `sparkle/sign_update --verify`, and that the app still works in a VM (specifically checking that signing it didn't invalidate the notarization, but I don't think signing it modifies it's contents, it just checks the signature matches the embedded public key)