feat: builds that hold steady, and a way to cut a release

One workflow, four jobs. Every pull request and push to main proves the
application still builds for Windows x64, macOS Apple Silicon, and
Linux x64, and that the committed frontend assets match what esbuild
would produce today. A tag matching v* runs the same builds and
publishes them as a GitHub release -- the Windows exe zipped, the Linux
binary tarred, the Mac binary dressed as an unsigned Atlas.app and
archived with ditto so its bits survive the trip.

Windows cross-compiles from the Linux runner because the Wails Windows
frontend is pure Go; Linux builds against WebKitGTK 4.1 on a pinned
ubuntu-24.04 so the runtime dependency never shifts silently; macOS
builds on a pinned arm64 image. The release job is the only one allowed
to write, and only on tags. Nothing here runs go generate: bundles are
data, and the executable travels alone.

commit

8aa5e198c00e4b8dcc7ccabd8d80f8e5821be47b

parent

0c2f370863f02eec60086de7e5ee837ca9a0a514

author

Dami <dami.etoile@gmail.com>