docs: changelog for the 2026-07-17 usertest round

Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>

CHANGELOG.md

@@ -5,6 +5,49 @@ version + `kStudioVersion` in `lib/main.dart` stay in lockstep.
 
 ## Unreleased
 
+### Changed (usertest panel 2026-07-17, 14 personas — all confirmed findings)
+
+- **Install trust gate.** One confirmation dialog before every module
+  install (store card, detail sheet, flow quick-fix): source, version,
+  license, maturity, required services — plus an honest signature note
+  (the hub does not report per-entry signature status yet; no fake
+  badge).
+- **Settings → About.** Product, Studio + hub version (live), vendor
+  Flemming.AI / Dr. Stefan Flemming, Apache 2.0, contact, docs link —
+  every value copyable.
+- **Discoverable sidebar.** Instant tooltips with the ⌘1–9/^1–9
+  shortcut, semantics labels, a visible "Search & commands ⌘K" row,
+  and a setting to keep the rail always expanded.
+- **Plain-language empty states.** Runs page explains background runs
+  in plain words and — via the hub's new `detached_enabled` flag —
+  says truthfully whether the feature is off or simply unused;
+  approvals inbox explains human approvals without raw capability
+  syntax; welcome cards lead with everyday language (tech detail
+  behind a toggle).
+- **One term per concept.** "Fähigkeiten" is the German lead term
+  (welcome, integrations, federation); "Registrierungs-Token" instead
+  of "Enrollment-Token"; category and source-kind labels localized
+  (no lowercase wire tokens like `document`, `1 system`).
+- **Audit page.** Free-text search over the event list; JSONL export
+  of the current view; the dev-only clear action moved from a bare
+  trash icon into a labeled overflow menu.
+- **Doctor page.** Copy button on every daemon path row; "n of m
+  events verified" instead of "n/m chain"; hash-chain wording unified.
+- **Federation page.** Primary action in the app bar and in the empty
+  state (FAB removed); plain-language empty text.
+- **Store.** License pill on the module card; maturity pills explain
+  themselves on hover; carousel shows a textual position; German tab
+  says "Studio & Designs".
+- **Formal address guard.** A test now rejects informal German forms
+  including reader-addressed imperatives; literal markdown backticks
+  are gone from both catalogs.
+- **Setup.** The wizard replaces the Settings dialog instead of
+  stacking on it, with a stronger scrim; the try-out profile names
+  the upgrade path to a regulated profile.
+- **Welcome checklist.** The "start a saved flow" tick is sticky
+  instead of silently unticking once the event leaves the
+  recent-events window.
+
 ### Changed (setup lives before the app)
 
 - **First-run gate.** A fresh install starts inside the setup: a