PM launchers run python -I, which ignores PYTHONPATH, so the macOS hermes-desktop-app-update route never loaded the sitecustomize capture hook. Route PM launchers through pm-launch.py as the Linux driver already does, and cover the packaged .app shape the macOS route launches.