v0.3.3 — Developer ID signed + Apple notarized darwin builds

Summary

Darwin builds are now Apple Developer ID Application signed and Apple-notarized, adopting the org-wide convention defined in nlink-jp/.github CONVENTIONS.md §Code Signing. End users on macOS no longer need to bypass Gatekeeper with right-click → Open or xattr -d com.apple.quarantine on first launch — the binary is trusted by the OS out of the box.

Release zip filenames now embed the version (data-analyzer-vX.Y.Z-<os>-<arch>.zip), aligning with sibling util-series tools.

Added

• package Makefile target — separates zip + notarize from build-all. Zips each platform with LICENSE + README.md, versioned naming, and notarizes the darwin zips.

Changes

• feat(build): Developer ID codesigning and Apple notarization — make package signs darwin/amd64 and darwin/arm64 builds with a Developer ID Application certificate and notarizes the resulting zips via xcrun notarytool. No personal identifiers, certificates, or credentials are committed; builds without local cert/profile fall back gracefully.

Verifying the signature

codesign -dv data-analyzer
spctl --assess --type install --context context:primary-signature data-analyzer

No behaviour change to the binary itself — feature-wise this is identical to v0.3.2.