fix(mas): add become:true for apps requiring sudo

fix(mas): use mas CLI directly instead of broken community.general.mas module

fix(mas): remove broken account check, mas install works if signed in

fix: Safari dev tools, SSH scope hint, chezmoi TTY fix

feat: add --skip-tags support and dotfiles function for Fish

refactor(brew): move parallels to manual install (requires sudo for .pkg)

refactor(brew): remove 1Password for Safari from MAS, use cask only

feat(brew): add Claude Code CLI and Claude desktop app

fix(chezmoi): add sourceDir to config so chezmoi update works standalone

fix(fish): remove unnecessary cma alias, chezmoi update is enough

refactor(fish, chezmoi): simplify to chezmoi update, remove redundant --source

feat(fish): add cma/cmd aliases for quick chezmoi sync without ansible

feat(fish): add zoxide init and ~/.local/bin PATH (pipx/uv)

refactor(ssh.yml): re-check auth after prompt, skip gh steps if not authenticated

feat(ssh.yml): run gh auth setup-git for HTTPS credential helper