ci: use key locker to sign neuron for windows

[Keith-CY]

ref:

• why use key locker: https://knowledge.digicert.com/solution/digicert-keylocker.html
• how to use key locker in github action: https://docs.digicert.com/en/digicert-keylocker/ci-cd-integrations/script-integrations/github-integration-ksp.html
• Update certificate of Neuron for windows: Request a digicert certificate on behalf of Magickbase PTE. LTD. Magickbase/neuron-public-issues#188

---

Package Neuron for test: https://github.com/nervosnetwork/neuron/actions/runs/6658266030/job/18094724690#step:17:124

Package Neuron for Release Draft: https://github.com/nervosnetwork/neuron/actions/runs/6658347469/job/18094990967#step:15:120

[yanguoyu]

How to skip the sign if these SM_XX secrets do not exist on the fork repo?

[Keith-CY]

How to skip the sign if these SM_XX secrets do not exist on the fork repo?

Signing application failed won't block the workflow, e.g. https://github.com/nervosnetwork/neuron/actions/runs/6656736617/job/18089955073#step:13:132

[Keith-CY]

How to skip the sign if these SM_XX secrets do not exist on the fork repo?

It does fail if SM_API_KEY is not set because authentication is required to download the smctl executable, fixed by 0abb497