[Bug] macOS TCC permissions re-prompt on every CLI update due to binary path changes

Bug Description
Claude Code CLI auto-update drops a new raw Mach-O binary into ~/.local/share/claude/versions/<version> on every version bump. Since macOS TCC keys permissions off binary path+hash, each new version shows up as a brand-new entry in Accessibility/Screen Recording with no icon and no readable name (just the bare version number, or lowercase "claude"). This is alarming from a security standpoint — indistinguishable at a glance from malware requesting the same permissions under a generic name. Had to verify via codesign -dv + Team ID match against the desktop app to confirm it was legitimate. Suggest: ship the CLI as a signed bundle with a proper name/icon, or keep a stable identity across versions so it doesn't re-prompt + leave stale entries every update.

Environment Info

• Platform: darwin
• Terminal: xterm-256color
• Version: 2.1.201
• Feedback ID: 43d47252-2924-4877-b58f-7229f89e1035

Errors

[]