Package binary releases and add in-app updater #1

	name: release

	on:
	push:
	tags:
	- "v*"

	permissions:
	contents: write
	# Required for cosign keyless signing — Fulcio issues a short-lived cert
	# against the workflow's OIDC token.
	id-token: write

	jobs:
	goreleaser:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: "1.25"
	cache: true

	- name: Set up Node
	uses: actions/setup-node@v4
	with:
	node-version: "20"
	cache: "npm"
	cache-dependency-path: frontend/package-lock.json

	- name: Install cosign
	uses: sigstore/cosign-installer@v3

	- name: Run GoReleaser
	uses: goreleaser/goreleaser-action@v6
	with:
	distribution: goreleaser
	version: "~> v2"
	args: release --clean
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback