0.4.0
Release workflow: gate the notarization tripwire on env, not secrets The secrets context is invalid in step `if` conditionals, so the v0.4.0 tag produced a startup_failure with no jobs. "Configure signing" already exports CSC_LINK to GITHUB_ENV only when the secret exists — gate on that. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>