chore: NAOT build cleanup and minor CI update

[United600]

• Ensures MSIX packages are produced only during CI by checking ContinuousIntegrationBuild, preventing unnecessary packaging and deployment failures during local builds
• Restores the publish profiles
• Disables ImplicitUsings to stop the .NET SDK from auto‑adding using directives
• Updates main.yml GitHub Actions dependencies to their latest versions, and several minor workflow improvements
• Updates the update-manifest script to support installing unsigned sideload package
• Adds a Update-ProjectVersion script to update the project version and copyright
• Adds a Set-Secrets script, and replaces the previous two-step action with a single one

[United600]

I think we should set up self‑signing for the sideload package, following something along these guidelines or these. This one is probably less useful.

[huynhsontung]

I think we should set up self‑signing for the sideload package, following something along these guidelines or these. This one is probably less useful.

Uhh... we don't have a key file to sign the app with. That's why we have been relying on the Microsoft Store to sign it.

[United600]

Uhh... we don't have a key file to sign the app with. That's why we have been relying on the Microsoft Store to sign it.

I didn't mean it that way, just that after moving to .NET 10 the sideload artifact stopped being self‑signed with a temporary certificate. It made the package impossible to install.
With this PR the artifact can be installed unsigned, but only on Windows 11. So we should set up a signing workflow with a temporary certificate, like this or this.