[codex] Harden macOS setup and MLX OCR output

[jmoore2333]

Summary

• Add a longer default UV_HTTP_TIMEOUT for first-run packaged dependency setup so slow PyPI responses are less likely to abort macOS startup.
• Fix MLX grounding-token cleanup so document/ocr output handles multi-box detection payloads instead of leaking raw tags.
• Raise the default PDF generation cap to reduce truncated OCR on dense scanned PDF pages.
• Bump the app version to 2.0.1 for a patch release.

Validation

• node --check main.js
• node --check renderer.js
• python scripts/test-backend-helpers.py using the repaired managed app venv
• npm run test:e2e outside the sandbox: 3 passed
• npm run test:build:smoke outside the sandbox: passed
• npm run dist:mac outside the sandbox: produced dist/DeepSeek-OCR-2 Client-2.0.1-arm64.dmg

Artifact

Built locally: dist/DeepSeek-OCR-2 Client-2.0.1-arm64.dmg
SHA256: f011ad05877b634a14d291017e234024550e03c4d4feb5dc581c9cd7a29dcc4b