Releases are created as drafts, so v0.3.21 downloads 404 on convexpanel.dev

[dotDennis]

Hi! The Build Desktop App workflow for the v0.3.21 tag (run #29) completed successfully — all six artifacts (macOS arm64/x64, Windows x64, Linux x64) were built, and create-release and update-homebrew both finished. But there's no public v0.3.21 release on the releases page, so every download link 404s:

• convexpanel.dev download buttons (the page hardcodes v0.3.21 in apps/web/src/components/download-page.tsx)
• install.sh and install.ps1 (they hit the GitHub Releases API for "latest", which still resolves to v0.3.20, but the architecture-specific DMG matching expects v0.3.21 naming once the site links to it)
• The Homebrew cask update (depends on the release being public)

Root cause: in .github/workflows/build-desktop.yml, the create-release job uses softprops/action-gh-release@v2 with draft: true. That means every tagged build produces a draft release that has to be manually published through the GitHub UI before the assets are publicly downloadable. v0.3.21's draft was likely never published.

- name: Create Release
  uses: softprops/action-gh-release@v2
  with:
    draft: true        # ← this
    generate_release_notes: true

This affects every release this workflow has produced (introduced in commit e8987eb), so previous releases must have been published manually each time.

Suggested fix:

1. Publish the existing v0.3.21 draft from the GitHub UI to immediately unblock downloads.
2. Change draft: true to draft: false in the workflow so future tagged releases publish automatically.

Happy to send a PR for step 2 if useful.