0.1.5

v0.1.5: switch Windows signing to azure/trusted-signing-action

Microsoft Trusted/Artifact Signing speaks codesigning.azure.net,
not vault.azure.net — so vcsjones/AzureSignTool can't reach it.
Replace the custom sign.js + AzureSignTool path with the official
GitHub Action: build unsigned, sign all .exe in dist/, regenerate
SHA512 in latest.yml (electron-updater would otherwise reject), and
upload via gh release upload.

Non-Windows jobs keep the existing build-and-publish flow.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>