Fix App Management permission loop

[hewigovens]

Summary

From #10.

This corrects the App Management permission preflight check so GhostTile treats TCCAccessPreflight result 0 as granted. The previous logic interpreted the result backwards, which could keep showing the App Management alert even after the user had granted permission.

This also bumps the app release metadata to 2.0.7 (24) and adds the releases/2.0.7.html release-note fragment for the patch build.

Changes

• Corrected AppManagementPermissionStatusReader to map preflight result 0 to allowed.
• Added GhostTileAppTests coverage for the preflight result mapping.
• Bumped app version/build from 2.0.6 (23) to 2.0.7 (24).
• Added release notes for 2.0.7.

Impact

Users who already granted App Management permission should no longer get stuck in the repeated authorization prompt loop. The app still falls back to the existing guidance flow when permission is missing or cannot be read.

Validation

• just format
• just lint (passes with existing unrelated warnings)
• swift test
• just build
• codesign --verify --deep --strict --verbose=2 GhostTile.app

[gemini-code-assist]

Code Review

This pull request introduces a new test target, GhostTileAppTests, and refactors the AppManagementPermissionStatusReader to extract the permission validation logic into a testable isAllowed method. This refactoring also adjusts the logic to correctly interpret a successful preflight result as 0. A review comment identifies a potential build issue where the Testing framework is used without ensuring the Package.swift tools version or dependencies support it.