Add connect-on-launch and notarized desktop release packaging

README.md

@@ -113,8 +113,9 @@ open "$HOME/Applications/Tunnel.app" --args --autostart
 It uses `~/.config/tunnel/config.json` like the CLI, shows tunnel status and
 certificate expiry, routes with copy/open/remove buttons, live logs, settings
 and profile import, and has a start/stop button that runs the service
-in-process. If the CLI service is already running, a banner offers to stop it
-first.
+in-process. The Settings dialog has **Connect on launch**; add the app to
+macOS Login Items (or the Linux/Windows equivalent) to reconnect at login. If
+the CLI service is already running, a banner offers to stop it first.
 
 Fyne needs CGO: the macOS build is tested; Linux and Windows must be built on
 those platforms (or with a native CGO cross toolchain), not with