ci: upgrade OpenSSL on macOS runners before building

The cryptography wheel bundled by PyInstaller references _SSL_get0_group_name
(added in OpenSSL 3.2), but the macos-15-intel runner has an older libssl.3.dylib
that doesn't export this symbol, causing the smoke test to crash. Upgrading
openssl@3 before the build ensures PyInstaller bundles a compatible dylib.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: alexrashed

.github/workflows/build.yml

@@ -56,6 +56,10 @@ jobs:
           retry_wait_seconds: 120
           command: make clean-venv venv
 
+      - name: Upgrade OpenSSL on MacOS
+        if: matrix.os == 'darwin'
+        run: brew upgrade openssl@3 || brew install openssl@3
+
       - name: Build using pyinstaller
         shell: bash
         run: make clean all