fix: use correct env var names for electron-builder notarization

electron-builder's built-in notarize expects:
  APPLE_APP_SPECIFIC_PASSWORD (not APPLE_ID_PASSWORD)
  APPLE_TEAM_ID               (from env, not hardcoded in config)

Remove teamId from notarize config and let it read from APPLE_TEAM_ID,
which is already passed as an env var. GitHub secret renamed accordingly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: alichtman

.github/workflows/build.yml

@@ -68,7 +68,7 @@ jobs:
       - name: Build ${{ matrix.target }}
         env:
           APPLE_ID: ${{ secrets.APPLE_ID }}
-          APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
+          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
           APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
         run: npm run package:${{ matrix.target }}
 

electron-builder.yml

@@ -8,8 +8,7 @@ files:
   - package.json
 
 mac:
-  notarize:
-    teamId: BF3UMC9FSZ
+  notarize: true
   target:
     target: dmg
     arch: