ci: Unquarantine unsigned binaries from Homebrew Cask

[cfunkhouser]

Since we do not have an Apple developer account or signing certificate, binaries published via Homebrew are quarantined by default. This change adds a post-install hook to un-quarantine the installed restish binary.

For reference, this is suggested by the GoReleaser documentation: https://goreleaser.com/customization/homebrew_casks/#signing-and-notarizing

The locally-generated restish.rb file output after this change looks like:

$ cat restish.rb
# This file was generated by GoReleaser. DO NOT EDIT.
cask "restish" do
  name "restish"
  desc "Restish is a CLI for interacting with REST-ish HTTP APIs with some nice features built-in."
  homepage "https://rest.sh"
  version "v0.0.0-next"

# ...

  postflight do
    if OS.mac?
      system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/restish"]
    end
  end

  # No zap stanza required
end

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!