Add allow-dirty = ["ci"] to skip dist staleness check on custom secret names

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Author: yshing

dist-workspace.toml

@@ -23,3 +23,5 @@ install-path = "CARGO_HOME"
 install-updater = false
 # macOS code signing (uses APPLE_CERTIFICATE, APPLE_CERTIFICATE_PASSWORD, APPLE_TEAM_ID secrets)
 macos-sign = true
+# CI file has custom secret name mappings, opt out of dist's staleness check
+allow-dirty = ["ci"]