- LoginItem registers on the first bundled launch, so the app opens on
startup without the user finding the toggle; a user who turns it off is
never overridden. A never-registered bundle reports SMAppService .notFound
rather than .notRegistered, so the guard only treats enabled/approval as
done. --diag now prints the raw status.
- New Workspace refuses a name that already exists (case-insensitive) and
says so inline; Return cannot bypass it. The composer's '# Name' still
switches to the existing workspace, which is the quick-capture gesture.