build-and-sign-mac requires environment release

Author: lionello

.github/workflows/go.yml

@@ -224,6 +224,7 @@ jobs:
   build-and-sign-mac:
     name: Build app and sign (MacOS)
     if: startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main' # only run this step on tagged commits or the main branch
+    environment: release
     needs: go-test
     runs-on: macos-latest # for codesign and notarytool
     steps: