fix: disable CI auto-trigger on tags to prevent signature mismatch

The build-release workflow was triggering on tag push, which caused:
1. Local script creates release with signed ZIP
2. Tag push triggers CI
3. CI builds DIFFERENT ZIP (different bytes = different signature)
4. CI overwrites release files
5. appcast.xml signature doesn't match GitHub files

Now CI only runs via manual workflow_dispatch. Use local release.sh
script for releases, or trigger CI manually if needed.

Author: Prot10

.github/workflows/build-release.yml

@@ -1,9 +1,12 @@
 name: Build and Release
 
+# DISABLED auto-trigger on tags - use local release.sh script instead
+# This prevents CI from overwriting locally-signed releases with different builds
+# To release via CI instead, use workflow_dispatch manually
 on:
-  push:
-    tags:
-      - 'v*'
+  # push:
+  #   tags:
+  #     - 'v*'
   workflow_dispatch:
     inputs:
       version: