docs: clarify HTTP is fine for localhost, HTTPS only for remote

Localhost is treated as a secure context by browsers, so notifications
and all browser APIs work without HTTPS. Updated README, CLI help,
install script, and systemd service to default to HTTP.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

README.md

@@ -48,7 +48,7 @@ Real-time desktop notifications when sessions need attention — never miss a pe
 - Tab blinking alerts: red for action-required, yellow for idle
 - Notifications include actual context (tool name, command, question text)
 - Hooks are auto-configured per case directory (`.claude/settings.local.json`)
-- Requires `--https` flag for browser notification API support
+- Works on HTTP for local use (localhost is a secure context)
 
 ---
 
@@ -298,11 +298,13 @@ npm install -g claudeman
 ## Getting Started
 
 ```bash
-claudeman web --https
-# Open https://localhost:3000
+claudeman web
+# Open http://localhost:3000
 # Press Ctrl+Enter to start your first session
 ```
 
+> **Note:** HTTP works fine for local use since `localhost` is treated as a secure context by browsers. Use `--https` only when accessing from another machine on your network.
+
 ---
 
 ## Keyboard Shortcuts