Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: jmcouffin

.github/workflows/winget.yml

@@ -21,6 +21,8 @@ jobs:
           $ErrorActionPreference = 'Stop'
           $wingetCreate = Join-Path $env:RUNNER_TEMP 'wingetcreate.exe'
           Invoke-WebRequest -Uri 'https://aka.ms/wingetcreate/latest' -OutFile $wingetCreate
+          $signature = Get-AuthenticodeSignature -FilePath $wingetCreate
+          if ($signature.Status -ne 'Valid') { throw "Downloaded wingetcreate.exe has invalid Authenticode signature: $($signature.Status)" }
           "WINGET_CREATE_EXE=$wingetCreate" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append
 
       - name: Update WinGet manifests