Cross-platform release packaging

Native Linux and macOS artifact builds plus hosted black-box installation acceptance and least-privilege release aggregation.

Details

work-buddy builds Linux x86-64 and Apple Silicon macOS tarballs on pinned native GitHub-hosted runners. Packaging pull requests run structural native builds; labeled, manual, and release runs can download the uploaded artifacts into separate fresh native VMs and exercise install, health, desktop launch, repair, and uninstall.

The release workflow builds the Windows setup executable and both tarballs, requires Linux/macOS acceptance for tagged releases, and attaches all accepted artifacts through one final draft-release job. The uploaded artifact, not the source checkout, is the installation subject.

Linux installs a .desktop entry that calls the shared self-healing launcher. macOS installs Work Buddy.app, whose console-less executable delegates to the same work_buddy.desktop_launcher module. Platform uninstall helpers delegate service/login-item/PATH teardown to wbuddy uninstall, remove application files, and preserve data unless remove-data is explicitly requested.