Sign *-setup.exe for updater manifest, pick newest bundle per platform,
reconcile after git checkout, and stop overwriting latest.json with empty
placeholder. Bump desktop to 0.1.3.
Co-authored-by: Cursor <cursoragent@cursor.com>
Signed updater bundles on disk are preserved across deploy, but
latest.json was reset to the git placeholder. Reconcile on nginx reload.
Co-authored-by: Cursor <cursoragent@cursor.com>