rastrillo / native Public

Fixes oficina/native-releases#1: publishmacupdate.py uploads Mac archives as Amadan release assets (tag <app>-<build>) and commits only the appcast. Rerun is the recovery; a refused upload passes only if the public download matches the signed bytes.