Fix tool resolution for packaged .app bundle

.app bundles launch with minimal PATH (/usr/bin:/bin only), missing
Homebrew paths. ExternalTools.resolve() searches:
- /usr/local/bin (Homebrew Intel)
- /opt/homebrew/bin (Homebrew Apple Silicon)
- ~/.local/bin (pipx installs)

Updated: exiftool (ConnectScreen + Copier), adb (AndroidConnector).
This fixes 'exiftool not installed' warning when launching as .app.

release.sh

@@ -39,9 +39,16 @@ fi
 NOTES=$(cat "$NOTES_FILE")
 echo "→ Release notes: $NOTES_FILE"
 
-# ── Gitea token ───────────────────────────────────────────────────────────────
+# ── Gitea token — from macOS Keychain, env var, or prompt ────────────────────
 if [ -z "${GITEA_TOKEN:-}" ]; then
-    read -rsp "GITEA_TOKEN not set. Enter token: " GITEA_TOKEN
+    # Try macOS Keychain first
+    GITEA_TOKEN=$(security find-generic-password -a kbolen -s gitea-photophetch -w 2>/dev/null || echo "")
+fi
+if [ -z "${GITEA_TOKEN:-}" ]; then
+    echo "No token found in Keychain or environment."
+    echo "Store it once with:"
+    echo "  security add-generic-password -a kbolen -s gitea-photophetch -w YOUR_TOKEN"
+    read -rsp "Or enter token now: " GITEA_TOKEN
     echo
 fi