Document the key fixes that made Sparkle updates work: - Using ditto instead of zip to preserve code signatures - XPC service entitlements for sandboxed apps - In-app logging for update debugging - Re-enabled sandbox with minimal entitlements
