add macos and windows signatures

Author: peterjah

.github/workflows/server.yml

@@ -114,11 +114,51 @@ jobs:
           OS: ${{ matrix.target }}
           ARCH: ${{ matrix.arch }}
 
+      - name: Sign Macos binary
+        uses: massalabs/massa/.github/actions/sign-macos@ccc3f02e34544f722634a6fb7732cc4bb515e90b
+        if: ${{ runner.os == 'macOS' }}
+        with:
+          paths: "server/build/deweb-server"
+          certificate-p12-base64: ${{ secrets.APPLE_CERTIFICATE_P12_BASE64 }}
+          certificate-password: ${{ secrets.APPLE_CERTIFICATE_P12_PASSWORD }}
+          signing-identity: ${{ vars.APPLE_DEVELOPER_ID_APPLICATION }}
+
       - name: Rename Server artifact
         run: mv build/deweb-server${{ matrix.ext }} build/deweb-server_${{ matrix.target }}_${{ matrix.arch }}${{ matrix.ext }}
 
       - name: Upload Server artifact
         uses: actions/upload-artifact@v4
         with:
           name: deweb-server_${{ matrix.target }}_${{ matrix.arch }}
-          path: server/build/deweb-server_${{ matrix.target }}_${{ matrix.arch }}${{ matrix.ext }} 
+          path: server/build/deweb-server_${{ matrix.target }}_${{ matrix.arch }}${{ matrix.ext }}
+
+  sign-windows-binary:
+    name: Sign Windows binary
+    needs: build
+    runs-on: windows-latest
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - name: Download Windows artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: deweb-server_windows_amd64
+          path: ./windows-binaries
+
+      - name: Sign Windows binary
+        uses: massalabs/station/.github/actions/sign-file-digicert@413d4c0bbd042d5e797fbb66bcd2c96be5c3e71a
+        with:
+          files: ./windows-binaries/deweb-server_windows_amd64.exe
+          SM_API_KEY: ${{ secrets.SM_API_KEY }}
+          SM_CLIENT_CERT_FILE_B64: ${{ secrets.SM_CLIENT_CERT_FILE_B64 }}
+          SM_CLIENT_CERT_PASSWORD: ${{ secrets.SM_CLIENT_CERT_PASSWORD }}
+          SM_CERT_FINGERPRINT: ${{ secrets.SM_CERT_FINGERPRINT }}
+          SM_HOST: ${{ secrets.SM_HOST }}
+
+      - name: Upload signed Windows binary (overwrite original)
+        uses: actions/upload-artifact@v4
+        with:
+          name: deweb-server_windows_amd64
+          path: ./windows-binaries/deweb-server_windows_amd64.exe
+          overwrite: true