feat: use local code signing certificate for stable signature

Author: CC11001100

Sources/AppVersion.swift

@@ -1,5 +1,5 @@
 import Foundation
 
 enum AppVersion {
-    static let current = "0.0.4"
+    static let current = "0.0.5"
 }

dist/VibeFocus-0.0.4-macos.zip dist/VibeFocus-0.0.5-macos.zipdist/VibeFocus-0.0.4-macos.zip renamed to dist/VibeFocus-0.0.5-macos.zip

@@ -15,9 +15,9 @@
   <key>CFBundlePackageType</key>
   <string>APPL</string>
   <key>CFBundleShortVersionString</key>
-  <string>0.0.4</string>
+  <string>0.0.5</string>
   <key>CFBundleVersion</key>
-  <string>0.0.4</string>
+  <string>0.0.5</string>
   <key>CFBundleIconFile</key>
   <string>AppIcon</string>
   <key>LSMinimumSystemVersion</key>

dist/VibeFocus.app/Contents/Info.plist

@@ -68,8 +68,15 @@ cat > "$PLIST_PATH" <<PLIST
 PLIST
 
 if command -v codesign >/dev/null 2>&1; then
-  echo "== Applying ad-hoc code signature =="
-  codesign --force --deep --sign - "$APP_DIR" >/dev/null
+  CERT_NAME="VibeFocus Local Code Signing"
+  if security find-identity -v -p codesigning | grep -F "$CERT_NAME" >/dev/null 2>&1; then
+    echo "== Applying local code signature: $CERT_NAME =="
+    codesign --force --deep --sign "$CERT_NAME" "$APP_DIR" >/dev/null
+  else
+    echo "WARNING: Local certificate '$CERT_NAME' not found, using ad-hoc signature"
+    echo "Create it with: security create-certificate -c '$CERT_NAME' -p codeSigning"
+    codesign --force --deep --sign - "$APP_DIR" >/dev/null
+  fi
 fi
 
 ZIP_NAME="${APP_NAME}-${VERSION}-macos.zip"