48e282dd97
- compile-macos.sh:flutter build 后 codesign(hardened runtime + timestamp + Release.entitlements)→ notarytool 公证(复用 App Store Connect API key) → stapler staple → 重新打包,产出已签名+公证+stapled 的 .app - 强制策略:缺 MACOS_DEVELOPER_ID_CERT_P12_BASE64 / APPSTORE_API_KEY_P8_BASE64 时在 flutter build 前 fail-fast,绝不产出未签名包 - deploy-client.yml:build-macos 步骤注入证书与 API key secrets - 新增 docs/macos-signing.md:Developer ID Application 证书创建与 secret 配置 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>