macOS applies a Full Disk Access grant to the process identity at launch, so
the running app can keep failing the probe after the toggle. Say so in the
still-required panel. Fold the two recheck handlers into one, drop the
unreachable no-localApi branch and its second toast, and document Safari
import in the user guide.

Co-Authored-By: Claude Code <noreply@anthropic.com>