feat(release): darwin/arm64 release workflow (#137) #150

Job	Run time
jscpd (duplication < 3% on touched code)	12s
Semgrep (SAST)	25s
SBOM (SPDX + CycloneDX)	19s
Trivy (filesystem + container scan)	7s
Gitleaks (secret scan)	14s
OSV-Scanner (SCA)	7s
	1m 24s

Provide feedback