ci: 加 package-check.yml，每次 commit 模拟完整打包

push 改动打包相关文件(aao/custom/resource/spec/deps/logo/workflow)时触发，
也可手动 workflow_dispatch。完整模拟发版打包流程：
lint → 关 Defender → pyinstaller → 冒烟验 PKG 能加载 → 下 AFA →
嵌图标 → 复制资源 → 7z 打包 → 上传 artifact(check-build)。

不发版不打 tag。尽早暴露 PKG 损坏/CI 环境差异等问题，不用打 tag 才知道。
代码 lint/format 检查仍由轻量的 check.yml 负责，本 workflow 只管打包重活。
concurrency：同分支新提交取消旧的在跑的。

Author: Windsland52

.github/workflows/package-check.yml

@@ -0,0 +1,99 @@
+name: Package Check
+
+# 每次 commit（push 改动打包相关文件）模拟完整打包：构建 + 冒烟验 PKG + 上传 artifact。
+# 不发版、不打 tag。尽早发现打包问题（PKG 损坏、CI 环境差异）。
+# 代码 lint/format 检查见 check.yml（轻量），本 workflow 只管打包。
+
+on:
+    push:
+        branches: [main, master]
+        paths:
+            - 'aao/**'
+            - 'custom/**'
+            - 'resource/**'
+            - 'examples/**'
+            - 'aao.spec'
+            - 'pyproject.toml'
+            - 'uv.lock'
+            - 'package.json'
+            - 'pnpm-lock.yaml'
+            - 'logo.png'
+            - '.github/workflows/package-check.yml'
+    workflow_dispatch:
+
+concurrency:
+    group: package-check-${{ github.ref }}
+    cancel-in-progress: true
+
+jobs:
+    package-check:
+        runs-on: windows-latest
+        steps:
+            - uses: actions/checkout@v6
+            - uses: actions/setup-python@v6
+              with:
+                  python-version: '3.13'
+            - uses: astral-sh/setup-uv@v8.1.0
+            - uses: pnpm/action-setup@v6
+            - uses: actions/setup-node@v6
+              with:
+                  node-version: 24
+                  cache: pnpm
+            - run: pnpm install --frozen-lockfile
+            - run: uv sync
+            - run: pnpm check
+            - run: pnpm check:py
+            - name: Disable Windows Defender realtime monitoring
+              shell: powershell
+              run: |
+                  Set-MpPreference -DisableRealtimeMonitoring $true -ErrorAction SilentlyContinue
+                  Add-MpPreference -ExclusionPath "$env:GITHUB_WORKSPACE" -ErrorAction SilentlyContinue
+                  Write-Host "Defender realtime monitoring disabled for build"
+            - name: Build (PyInstaller)
+              run: uv run pyinstaller aao.spec --noconfirm
+            - name: Smoke test packaged exe
+              shell: bash
+              run: |
+                  export QT_QPA_PLATFORM=offscreen
+                  timeout 20 ./dist/aao.app/aao.app.exe --no-api > smoke.log 2>&1 || true
+                  if grep -q "Could not load PyInstaller" smoke.log; then
+                    echo "[ERR] packaged exe failed to load PKG archive"
+                    cat smoke.log
+                    exit 1
+                  fi
+                  echo "[OK] packaged exe loads PKG archive"
+                  head -5 smoke.log
+            - name: Download AFA (ArknightsFrameAssistant)
+              shell: bash
+              run: |
+                  mkdir -p dist/aao.app/afa
+                  repo="CloudTracey/arknights-frame-assistant"
+                  tag="$(curl -fsSL "https://api.github.com/repos/$repo/releases/latest" | sed -n 's/.*"tag_name": *"\([^"]*\)".*/\1/p')"
+                  echo "AFA latest tag: $tag"
+                  curl -fsSL "https://github.com/$repo/releases/download/$tag/AFA.exe" -o dist/aao.app/afa/AFA.exe
+                  curl -fsSL "https://raw.githubusercontent.com/$repo/$tag/LICENSE" -o dist/aao.app/afa/LICENSE || echo "[WARN] AFA LICENSE 未取到"
+            - name: Convert logo.png to ico
+              shell: bash
+              run: uv run python -c "from PIL import Image; Image.open('logo.png').save('logo.ico', format='ICO', sizes=[(256,256),(128,128),(64,64),(48,48),(32,32),(16,16)])"
+            - name: Apply app icon
+              shell: bash
+              run: |
+                  cp logo.ico dist/aao.app/logo.ico
+                  curl -fsSL https://github.com/electron/rcedit/releases/download/v2.0.0/rcedit-x64.exe -o rcedit.exe
+                  ./rcedit.exe dist/aao.app/aao.app.exe --set-icon logo.ico
+                  echo "[OK] Applied Windows executable icon"
+            - name: Stage external resources
+              shell: bash
+              run: |
+                  cp -r resource data examples dist/aao.app/
+            - name: Package
+              shell: bash
+              run: |
+                  archive="ArknightsAutoOperator-check-${GITHUB_SHA::7}.zip"
+                  ( cd dist/aao.app && 7z a "../../$archive" . )
+            - uses: actions/upload-artifact@v7
+              with:
+                  name: check-build
+                  path: |
+                      *.zip
+                      dist/aao.app