Apple Developer notarization for signed DMG

[magicnight]

Current v0.1.0 DMG is unsigned; users must right-click -> Open + xattr -cr. Enroll Apple Developer account, sign with Developer ID Application cert, notarize via notarytool, staple. Update release.yml.