- re-check that the real path is still a regular file inside its root
right before launching; a changed target answers 404 (review L4)
- run openers on a dedicated single worker, not ComfyUI's default
executor, and make dbus-send wait for the FileManager1 reply
(--print-reply --reply-timeout=2000) so a missing service falls back
to xdg-open (L1)
- reap launched processes on a daemon thread, give them a minimal
environment with a fixed system PATH, and use /usr/bin/open on macOS
and dbus-send/xdg-open resolved only on that PATH (L5)