Ad-hoc sign release builds with microphone entitlement

The build script had CODE_SIGNING_ALLOWED=NO, so GitHub release
builds were completely unsigned. Without a code signature, macOS
TCC cannot persist microphone permission grants, causing repeated
prompts on every Start Reading click.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: davut

Wirdi/build.sh

@@ -65,6 +65,12 @@ find "$ARM_APP" -type f | while read -r arm_file; do
   fi
 done
 
+echo "🔏 Ad-hoc signing with entitlements…"
+codesign --force --deep --sign "-" \
+  --entitlements "$PROJECT_DIR/Wirdi/Wirdi.entitlements" \
+  --options runtime \
+  "$OUTPUT_APP"
+
 echo "📦 Creating DMG…"
 rm -f "$DMG_PATH"