allow app from unknown developer

Hi! there! i run sonoma on a late '13 mbpro and work flawlessly. only thing i'm having issue is to run an "unknown app" as per title. didnt thought i'll run in to this issue since sip is partially disabled. how do i go about it? i tried to flag all the boxes in security setting on the oplc app. but do not work, and rebooting set the flag on the default ones. csrutil status give me this :

Configuration:

Apple Internal: disabled

Kext Signing: disabled

Filesystem Protections: disabled

Debugging Restrictions: enabled

DTrace Restrictions: enabled

NVRAM Protections: enabled

BaseSystem Verification: enabled

do i need to disable it from recovery terminal? as so, how do i enter recovery?do i need the usb stick from which i installed? ( probably erased it )

i'm all ears! thanks!!