fix: sign all executables in macOS bundle

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: 2 people

.github/workflows/build.yml

@@ -145,8 +145,8 @@ jobs:
       - name: Sign native modules in bundle
         working-directory: ./lumis/apps/web/src-tauri/target/release/bundle/macos/Lumis.app
         run: |
-          # Sign all .node files to fix notarization issues
-          find . -name "*.node" -type f -exec codesign --force --sign "${{ secrets.APPLE_SIGNING_IDENTITY }}" --options runtime {} \;
+          # Sign all executable files, .node files, and dylib to fix notarization issues
+          find . -type f \( -name "*.node" -o -name "*.dylib" -o -perm +111 \) -exec codesign --force --sign "${{ secrets.APPLE_SIGNING_IDENTITY }}" --options runtime {} \;
 
       - name: Find DMG file
         id: dmg