Export `HASHES` as `enum`, not `const enum`

[nikwen]

See this comment: electron-forge/electron-forge-docs#210 (comment)

Then update the Azure Trusted Signing guide to require a higher @electron/windows-sign version, to use the new type, and to remove the @ts-expect-error. (Refer to the comment linked above for context.)