Goal

Publish Veritas Kanban v5.2.5 with the desktop onboarding and migration fixes, complete release documentation, and update the supported Homebrew cask.

Scope

• Include the draggable startup/auth/setup surfaces and existing desktop SQLite detection from fix(desktop): make setup draggable and recognize existing data #901 / fix: clarify desktop setup for existing data #902.
• Include the completed web/source-to-desktop migration runbook from docs: add web-to-Mac desktop migration guide #899 / docs: add web-to-Mac desktop migration guide #900.
• Include the production dependency audit fixes from fix(security): update js-yaml and fast-uri advisory floors #903 / fix: raise dependency advisory floors #908.
• Bump every workspace package and release-facing version reference from 5.2.4 to 5.2.5.
• Update CHANGELOG, release notes, upgrade/admin guidance, release checklist/evidence, and artifact links.
• Publish the GitHub release so Desktop Release produces signed and notarized macOS artifacts.
• Verify the release assets, checksums, updater metadata, signature, notarization, and packaged runtime.
• Update and merge the BradGroux/homebrew-tap cask, then verify style, audit, dry-run, livecheck, and upgrade/install behavior.

Acceptance criteria

• v5.2.5 source and documentation changes merge through a reviewed PR with required checks passing.
• The GitHub release points at the merged release commit.
• Signed/notarized DMG and ZIP, blockmaps, checksum sidecars, and latest-mac.yml are present and validate.
• The Homebrew cask serves the v5.2.5 ZIP with the published SHA256.
• An existing populated desktop SQLite workspace upgrades without reimporting or replacing data, and the first-run setup offers Use Existing Data when setup remains incomplete.
• Exact release workflow, artifact, hash, and tap evidence is recorded in release documentation.