feat(ci): Add macOS notarization to desktop workflow

- Add a step to decrypt secrets required for notarization.
- Introduce a specific packaging step for macOS (`notarizeReleaseDmg`) to handle notarization.
- Separate the packaging step for Linux and Windows, which do not require notarization.

Author: softartdev

.github/workflows/desktop.yaml

@@ -26,8 +26,16 @@ jobs:
         with:
           cache-read-only: false
           cache-overwrite-existing: true
-      - name: Packaging
-        run: ./gradlew packageReleaseDistributionForCurrentOS #TODO packageRelease
+      - name: Decrypt large secret
+        run: ./.github/scripts/decrypt_secret.sh
+        env:
+          LARGE_SECRET_PASSPHRASE: ${{ secrets.LARGE_SECRET_PASSPHRASE }}
+      - name: Packaging (macOS)
+        if: matrix.os == 'macos-latest'
+        run: ./gradlew --no-configuration-cache :app:desktop:notarizeReleaseDmg
+      - name: Packaging (Linux & Windows)
+        if: matrix.os != 'macos-latest'
+        run: ./gradlew packageReleaseDistributionForCurrentOS
       - name: Release
         uses: softprops/action-gh-release@v2
         with: