Summary

• Add macOS notarization configuration to package.json using environment variable ${env.APPLE_TEAM_ID}, so notarization only runs when the variable is set (CI builds)
• Add APPLE_ID, APPLE_APP_SPECIFIC_PASSWORD, and APPLE_TEAM_ID secrets to the release workflow
• Local builds remain unaffected — notarization is skipped when environment variables are absent

Test Plan

• Verify local npm run build:mac still works without notarization
• Add APPLE_ID, APPLE_APP_SPECIFIC_PASSWORD, APPLE_TEAM_ID secrets to GitHub repo settings
• Trigger a pre-release to verify notarization completes successfully
• Verify the resulting .dmg passes spctl --assess on macOS

🤖 Generated with Claude Code