Test desktop release with the updated icon and pinned bundled sidecar.

• macOS build is Developer ID signed, notarized, and stapled.
• Desktop packaging now includes a pinned cowork-server sidecar manifest and launches that exact bundled binary at runtime.
• Windows build is included for packaging smoke-test coverage.
• This is a test release, not the final production release.