Install the Herdr GUI client from penso/tap

Install the Herdr GUI client from penso/tap herdr-gpui is a native client for the herdr daemon. Upstream's supported macOS route is their tap's cask: a signed, notarized universal app. The tap is declared alongside it because cleanup = "zap" untaps anything unlisted.