Release notes: clarify stapled pkg supports offline Gatekeeper checks

Author: crisdosaygo

.github/workflows/release.yml

@@ -471,7 +471,7 @@ jobs:
 
           - `fips-pad` — Raw macOS universal CLI binary (signed).
           - `fips-pad-macos-universal.zip` — Standalone macOS binary package submitted to Apple notarization when credentials are configured.
-          - `fipspad_darwin_universal.pkg` — macOS installer package (signed/notarized when credentials are configured).
+          - `fipspad_darwin_universal.pkg` — macOS installer package (signed, notarized, and stapled when credentials are configured), so Gatekeeper can validate it offline.
           - `fipspad_linux_amd64` — Linux amd64 binary.
           - `fipspad_windows_amd64.exe` — Windows amd64 executable (signed when credentials are configured).
           - `SHA256SUMS.txt` — Combined checksums for all release artifacts.