octavore

Set up the `octavore/strudel-release-action` GitHub Action so a macOS strudel app builds, signs, notarizes, and packages a DMG in CI on every tag push, and gets uploaded as a draft GitHub release. Use this whenever the user wants CI/CD, automated releases, or a release workflow for a strudel-based macOS app, or mentions "release action", "GitHub Actions release", "sign and notarize in CI", "DMG in CI", or asks to automate what `strudel release` does locally. Also use it if the user is troubleshooting an existing `strudel-release-action` workflow (missing secrets, failed notarization, wrong strudel-version). Trigger even if they don't name the action explicitly — e.g. "how do I get GitHub to build a signed DMG when I push a tag" should trigger this.