Release signing: Apple Developer Program (macOS notarize + iOS TestFlight) & Android release keystore

[nandal]

Tracks the signing/distribution follow-ups referenced by TODO(#…) in .github/workflows/release.yml.

• Apple Developer Program ($99/yr — one membership covers both macOS + iOS). Confirm/upgrade the account, then set repo variable APPLE_SIGNING_ENABLED=true and add signing secrets.
• macOS: import Developer ID cert, codesign --options runtime, build .dmg, notarytool submit --wait, stapler staple, upload to the release.
• iOS: TestFlight via the App Store Connect API (fastlane pilot) — App Store only, no downloadable binary.
• Windows: OV/EV code-signing cert to clear the SmartScreen "unknown publisher" warning.
• Android: release keystore + signingConfig in android/app/build.gradle (currently a debug-signed release APK — sideloadable, not store-grade).

[wrokin]

🤖 wrokin triage

Track implementation of release signing for macOS, iOS, Windows, and Android, including Apple Developer Program setup, codesigning, notarization, TestFlight, Windows SmartScreen cert, and Android keystore.

Suggested priority: high
Labels applied: enhancement
Possible duplicate: no

_{Model: deepseek/deepseek-v4-pro · your key, your model (BYOK)}