fix: harden post-3.10.1 code review findings

- Restore backward-compatible bundle-ID hash: name only included when
  --name is explicitly passed, so existing apps are not re-identified
- Make camera/microphone entitlements opt-in via --camera/--microphone
  flags instead of being granted to all apps by default
- Use fsExtra.move (atomic rename) instead of copy+remove in --install
- Show popup window hostname instead of full URL as window title
- Move resolvedName calculation after all name-resolution branches so
  GitHub-Actions fallback is reflected in the identifier
- Refactor build_window to accept WindowBuildOptions struct (7 params -> 4)
- Update docs (EN + CN) with macOS media permissions section