docs(macos): note notarized release binaries

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/modules/ROOT/pages/install/macos.adoc

@@ -34,11 +34,11 @@ tar -xzf OliveTin-darwin-arm64.tar.gz
 cd OliveTin-darwin-arm64
 ----
 
-== Remove the Gatekeeper quarantine
+== Gatekeeper and notarization
 
-The binary is downloaded from the internet and is not notarized by Apple, so on first run Gatekeeper blocks it with a message like _"OliveTin can't be opened because Apple cannot check it for malicious software."_
+Current release binaries are **Developer ID signed and notarized** by Apple. After extract, you should be able to run `./OliveTin` normally.
 
-Clear the quarantine attribute so it will run:
+If Gatekeeper still blocks an older (unsigned) build, or you see a prompt that Apple cannot check the binary for malicious software, clear the quarantine attribute:
 
 [source,shell]
 ----

docs/modules/ROOT/pages/install/macos_service.adoc

@@ -2,7 +2,7 @@
 
 This option installs OliveTin as a launchd service, so it runs in the background and starts automatically. This is the macOS equivalent of running OliveTin as a Linux systemd service or a xref:install/windows_service.adoc[Windows service]. If you just want to run OliveTin as a regular application, follow the xref:install/macos.adoc[macOS install] instructions instead.
 
-Before continuing, complete the xref:install/macos.adoc[macOS install] steps (download, extract, and clear the Gatekeeper quarantine) and confirm OliveTin starts correctly by running `./OliveTin`.
+Before continuing, complete the xref:install/macos.adoc[macOS install] steps (download, extract, and confirm Gatekeeper allows the binary) and confirm OliveTin starts correctly by running `./OliveTin`.
 
 == Choose LaunchAgent or LaunchDaemon