One product per machine: the CLI and the desktop app share one version, the store accounts and the app folder list

- one version: package.json's version is the desktop app's too (desktopVersion removed); tools/desktop-version.ts
  keeps the plugin manifests and the app's copies equal, desktop-release publish refuses another version, release
  order app first then npm publish; the unpublished desktop 0.1.0 candidate is noted in the docs and CHANGELOG
- storebound desktop installs (per user, no admin: macOS DMG -> /Applications or ~/Applications, Windows NSIS /S,
  Linux AppImage + .desktop with the storebound:// handler), updates an older app, notes a newer one (downgrade only
  with --force), asks once ([Y/n], --yes, exit 3 without a terminal), opens on the folder; --dry / --json / --download;
  the install steps are pure plans (cli/lib/desktop-install.ts); the version's own manifest dl/<version>/latest.json
- credentials: one store, the CLI's credential profiles in ~/.storebound/credentials; the desktop writes and reads
  them (profiles.rs, files 0600), moves old keychain accounts into profiles on first start, shows profiles the CLI
  made; precedence env > named profile > project file > default profile; config `account`, "account" in the
  project's credentials.json; storebound accounts list | import (dedup by key id / service account e-mail, key files
  copied 0600, project file keeps keystore and review contact, backup, --dry, never prints values) | use
- app folders: one list ~/.storebound/projects.json shared by the desktop (registry.rs), storebound desktop,
  apps folders | add | remove, ws init and ws without a workspace file
- desktop: notice when a folder pins another storebound version; storebound-desktop --version
- tests: version drift, desktop decisions and per-OS plans, credential precedence and import, registry (TS + Rust),
  keychain migration and profile round trip (Rust), boot check with old keychain state and the new shared state

tools/desktop-boot-check.ts

@@ -313,6 +313,32 @@ async function runCase(browser: Browser, name: string, sidecar: Sidecar, o: { br
       if (!text.includes('Folder not found') || !text.includes('Locate…') || !text.includes('Remove from list')) problems.push(`${p.name}: no "Folder not found" panel with Locate… / Remove`);
       else notes.push(`${p.name}: Folder not found, Locate… / Remove`);
     }
+    // shared with the CLI: each account names its credential profile (or that its old keychain key has not moved)
+    const accts = fx.accounts_list as { label?: string; profile?: string | null }[];
+    if (accts.length) {
+      const nav = page.locator('nav.side button.nav', { hasText: 'Accounts' }).first();
+      if (await nav.count()) {
+        await nav.click({ timeout: WAIT_MS });
+        await settle(page);
+        const text = await page.locator('#content').innerText();
+        for (const a of accts) {
+          const want = a.profile ? `profile ${a.profile}` : 'key not moved from the keychain yet';
+          if (!text.includes(want)) problems.push(`Accounts: "${want}" not shown for ${a.label} (${text.replace(/\s+/g, " ").slice(text.replace(/\s+/g, " ").indexOf(a.label ?? "") , 400)})`);
+        }
+        notes.push(`Accounts: ${accts.map(a => a.profile ?? '(keychain)').join(', ')}`);
+      } else problems.push('no Accounts entry in the sidebar');
+    }
+    // a folder that pins another storebound version says so on its app page
+    for (const p of fx.projects_list.filter(x => (x as { storeboundPin?: string }).storeboundPin && isDir(x.path))) {
+      const pin = (p as { storeboundPin?: string }).storeboundPin!;
+      const item = page.locator('nav.side .nav-app', { hasText: p.name }).first();
+      if (!(await item.count())) { problems.push(`${p.name}: not in the sidebar`); continue; }
+      await item.click({ timeout: WAIT_MS });
+      await settle(page);
+      const text = await page.locator('#content').innerText();
+      if (!text.includes(`uses storebound ${pin}`)) problems.push(`${p.name}: no "project uses storebound ${pin}" notice`);
+      else notes.push(`${p.name}: pin notice ${pin}`);
+    }
   } finally {
     await ctx.close();
     server.stop(true);