Sign *-setup.exe for updater manifest, pick newest bundle per platform,
reconcile after git checkout, and stop overwriting latest.json with empty
placeholder. Bump desktop to 0.1.3.
Co-authored-by: Cursor <cursoragent@cursor.com>
Rebuild dmg with real updater.pub. Improve check failure messages and
fix publish signing when TAURI_SIGNING_PRIVATE_KEY is set.
Co-authored-by: Cursor <cursoragent@cursor.com>
Use --ci for key generation and pass empty password to tauri signer sign
so Jenkins/SSH builds can sign updater bundles without a TTY.
Co-authored-by: Cursor <cursoragent@cursor.com>