fix: add secure timestamp and strip get-task-allow for notarisation

Notarisation requires a secure timestamp on signatures and rejects the
com.apple.security.get-task-allow debug entitlement. Add
OTHER_CODE_SIGN_FLAGS=--timestamp and CODE_SIGN_INJECT_BASE_ENTITLEMENTS=NO.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: phrontizo

.github/workflows/release.yml

@@ -96,6 +96,8 @@ jobs:
             CURRENT_PROJECT_VERSION="$BUILD_NUMBER" \
             CODE_SIGN_STYLE=Manual \
             CODE_SIGN_IDENTITY="Developer ID Application" \
+            CODE_SIGN_INJECT_BASE_ENTITLEMENTS=NO \
+            OTHER_CODE_SIGN_FLAGS=--timestamp \
             -quiet
 
       - name: Create DMG