Add note to review install script before running

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: wesm

README.md

@@ -34,7 +34,7 @@ Currently supports Gmail, with WhatsApp and other messaging platforms planned.
 curl -fsSL https://msgvault.io/install.sh | bash
 ```
 
-The installer detects your OS and architecture, downloads the latest release from [GitHub Releases](https://github.com/wesm/msgvault/releases), verifies the SHA-256 checksum, and installs the binary.
+The installer detects your OS and architecture, downloads the latest release from [GitHub Releases](https://github.com/wesm/msgvault/releases), verifies the SHA-256 checksum, and installs the binary. You can [review the script](https://msgvault.io/install.sh) before running, or download a release binary directly from GitHub.
 
 To build from source instead (requires **Go 1.25+** and a C/C++ compiler for CGO and to statically link DuckDB):