feat: updated release builder - signed mac apps, winget manifest

Author: Venipa

.github/workflows/release.yml

@@ -24,7 +24,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
-          cache: 'pnpm'
+          cache: "pnpm"
         # install dbus-1 dep for xosms
       - if: matrix.os == 'ubuntu-latest'
         name: update apt and install utils
@@ -75,6 +75,12 @@ jobs:
         run: |
           pnpm install --frozen-lockfile
 
+      - if: matrix.os == 'macos-latest'
+        name: Write APPLE_API_KEY to AuthKey.p8
+        run: |
+          mkdir -p .secrets
+          echo ${{ secrets.APPLE_API_KEY }} > .secrets/AuthKey.p8
+          chmod 600 .secrets/AuthKey.p8
       - name: Build Electron release
         run: pnpm release
         env:
@@ -85,8 +91,12 @@ jobs:
           VITE_LASTFM_SECRET: ${{ secrets.LASTFM_SECRET }}
           VITE_GITHUB_REPOSITORY: ${{ github.repository }}
           APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
-          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+          APPLE_API_KEY: .secrets/AuthKey.p8
           APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
+      - if: matrix.os == 'macos-latest'
+        name: Cleanup certificates and keys
+        run: |
+          rm -rf .secrets
       - if: matrix.os == 'ubuntu-latest'
         name: Upload release source maps to sentry
         continue-on-error: true
@@ -109,7 +119,7 @@ jobs:
 
           # Create new deploy for this Sentry release
           sentry-cli releases deploys $SENTRY_RELEASE new -e $SENTRY_DEPLOY_ENVIRONMENT
-          
+
     #   - if: matrix.os == 'windows-latest' && steps.getVersion.outputs.releaseType == 'stable'
     #     name: Upload new winget release
     #     uses: vedantmgoyal9/winget-releaser@v2