Migrate to Electrobun 2.0.2 (Hutch)

Electrobun 2.x replaces the vendored CLI with Hutch: the npm package is now a
bootstrap whose exports are a throwing stub, and the SDK is projected into
.hutch/devkit. The app stays on the Bun main process — `mainProcess: "bun"` is
load-bearing, since the 2.x default (Cottontail) ignores build.bun and with it
the ssh2 externals — and the bundle now ships the pinned Bun 1.4.0.

- electrobun 2.0.2 as an exact devDependency. `electrobun prepare` takes the
  old CLI re-sign step's slot in postinstall and every dev/build/start/release
  script: tsc (root tsconfig extends the devkit's) and the Angular build
  (electrobun/view mapped into the devkit) resolve the SDK there.
- Imports move to electrobun/main. The CLI re-sign script and the v1 "three"
  type shim are gone (Hutch's binaries are validly signed).
- UI: Electroview's bunSocket is hostSocket; noImplicitReturns is off because
  the devkit's raw-TS browser SDK compiles inside the UI program.
- Updater.applyUpdate() now consults before-quit, so the transfers/unsaved
  guard's "Quit Anyway" re-runs the apply instead of quitting without it.
- 2.x applies trafficLightOffset from macOS's default button position (1.18.1
  clamped it inside the titlebar); {12, 4} centres the lights in the header.
- Releases: mac-x64 dropped (2.x publishes no macOS x64 core, so no Rosetta
  path). artifacts/ is emptied before each build and published verbatim.
  Installers lost the stable- prefix (the update feed kept it), so release.ts,
  deploy.sh and the site links follow. Linux ships Electrobun's Setup
  installer instead of the portable tarball and its miniSCP.sh wrapper.
- Docs cover all of the above, plus re-checks against 2.0.2: still no native
  modal windows; window close is now cancellable through will-close.

Verified: tsc, build:ui, a stable mac-arm64 release (dmg + the v1-compatible
stable-macos-arm64 feed) and dev launches (RPC, Settings window, traffic
lights). Windows/Linux builds and the v1 -> 2.x Windows update bridge still
need their first run on native machines.

Co-Authored-By: Claude <noreply@anthropic.com>

src/bun/index.ts

@@ -1,4 +1,4 @@
-import Electrobun, { ApplicationMenu, BrowserWindow, Updater, Utils } from "electrobun/bun";
+import Electrobun, { ApplicationMenu, BrowserWindow, Updater, Utils } from "electrobun/main";
 import { BRANDING } from "../shared/branding";
 import type { EditorOpenContext } from "../shared/rpc";
 import { effectiveConcurrency, type AppSettings } from "../shared/types";
@@ -55,6 +55,7 @@ const events = {
 	openConnectionManager: () => {},
 	openSettings: () => {},
 	showAbout: () => {},
+	applyUpdate: async () => {},
 };
 const rpc = createAppRPC({ registry, engine, store, settings, edits, watcher, events });
 // late-bound like events: a watched local dir changed -> tell the main webview
@@ -211,11 +212,24 @@ engine.onUpdate = (snapshot) => {
 
 // don't quit out from under running transfers or unsaved editors
 let quitConfirmed = false;
+// Updater.applyUpdate() asks this guard first (2.x), so remember the quit is
+// update-initiated: "Quit Anyway" must re-run the apply, or a plain quit would
+// drop the downloaded update.
+let applyingUpdate = false;
+events.applyUpdate = async () => {
+	applyingUpdate = true;
+	try {
+		await Updater.applyUpdate();
+	} finally {
+		applyingUpdate = false;
+	}
+};
 Electrobun.events.on("before-quit", (event) => {
 	const transfers = engine.activeJobCount();
 	const dirtyEditors = editors.dirtyCount();
 	if (quitConfirmed || (transfers === 0 && dirtyEditors === 0)) return;
 	(event as { response: { allow: boolean } }).response = { allow: false };
+	const updating = applyingUpdate; // read now: it clears once the vetoed apply returns
 	void (async () => {
 		const parts = [
 			transfers > 0 && `${transfers} transfer${transfers === 1 ? " is" : "s are"} still running`,
@@ -233,7 +247,10 @@ Electrobun.events.on("before-quit", (event) => {
 		});
 		if (response === 0) {
 			quitConfirmed = true;
-			Utils.quit();
+			// the trailing quit is a no-op once the apply is quitting, and still
+			// quits if it bails (no prepared download)
+			if (updating) void Updater.applyUpdate().finally(() => Utils.quit());
+			else Utils.quit();
 		}
 	})();
 });