chore(release): enhance release workflow and update asset documentation for v0.0.4

- Add validation step for release app secrets in the GitHub Actions workflow.
- Update CSS variables for improved styling consistency.
- Revise asset documentation to clarify published files and expected patterns for future releases.

Author: BunsDev

.github/workflows/release.yml

@@ -318,6 +318,17 @@ jobs:
     needs: [preflight, release]
     runs-on: ubuntu-24.04
     steps:
+      - name: Validate release app secrets
+        shell: bash
+        env:
+          RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }}
+          RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
+        run: |
+          set -euo pipefail
+          [[ -n "$RELEASE_APP_ID" ]] || { echo "Missing secret RELEASE_APP_ID"; exit 1; }
+          [[ "$RELEASE_APP_ID" =~ ^[0-9]+$ ]] || { echo "RELEASE_APP_ID must be a numeric GitHub App ID"; exit 1; }
+          [[ -n "$RELEASE_APP_PRIVATE_KEY" ]] || { echo "Missing secret RELEASE_APP_PRIVATE_KEY"; exit 1; }
+
       - id: app_token
         name: Mint release app token
         uses: actions/create-github-app-token@v2

apps/desktop/turbo.jsonc

@@ -7,16 +7,16 @@
       "outputs": ["dist-electron/**"],
     },
     "dev": {
-      "dependsOn": ["okcode#build"],
+      "dependsOn": ["okcodes#build"],
       "persistent": true,
     },
     "start": {
-      "dependsOn": ["build", "@okcode/web#build", "okcode#build"],
+      "dependsOn": ["build", "@okcode/web#build", "okcodes#build"],
       "cache": false,
       "persistent": true,
     },
     "smoke-test": {
-      "dependsOn": ["build", "@okcode/web#build", "okcode#build"],
+      "dependsOn": ["build", "@okcode/web#build", "okcodes#build"],
       "cache": false,
       "outputs": [],
     },

docs/releases/v0.0.4/assets.md

@@ -10,25 +10,40 @@ The GitHub Release also includes **documentation attachments** (same content as
 | `okcode-RELEASE-NOTES.md`   | [v0.0.4.md](../v0.0.4.md)             |
 | `okcode-ASSETS-MANIFEST.md` | This file                             |
 
-After the workflow completes, expect **installer and updater** artifacts similar to the following (exact names may include the product name `OK Code` and version `0.0.4`).
+## Published on GitHub (`v0.0.4`)
 
-## Desktop installers and payloads
+These files are attached to the [v0.0.4 release](https://github.com/OpenKnots/okcode/releases/tag/v0.0.4) (macOS Apple Silicon only for this tag):
 
-| Platform            | Kind           | Typical pattern |
-| ------------------- | -------------- | --------------- |
-| macOS Apple Silicon | DMG            | `*.dmg` (arm64) |
-| macOS Intel         | DMG            | `*.dmg` (x64)   |
-| macOS               | ZIP (updater)  | `*.zip`         |
-| Linux x64           | AppImage       | `*.AppImage`    |
-| Windows x64         | NSIS installer | `*.exe`         |
+| File                               | Role                           |
+| ---------------------------------- | ------------------------------ |
+| `OK-Code-0.0.4-arm64.dmg`          | macOS Apple Silicon installer  |
+| `OK-Code-0.0.4-arm64.dmg.blockmap` | DMG differential updates       |
+| `OK-Code-0.0.4-arm64.zip`          | macOS updater payload (zip)    |
+| `OK-Code-0.0.4-arm64.zip.blockmap` | Zip differential updates       |
+| `latest-mac.yml`                   | Electron macOS update manifest |
+| `okcode-CHANGELOG.md`              | Root changelog (copy)          |
+| `okcode-RELEASE-NOTES.md`          | [v0.0.4.md](../v0.0.4.md) copy |
+| `okcode-ASSETS-MANIFEST.md`        | This manifest (copy)           |
+
+Other platforms (Intel macOS, Linux, Windows) may ship on future tags when CI attaches those artifacts.
+
+## Typical patterns (future / multi-platform builds)
+
+| Platform            | Kind           | Typical pattern                      |
+| ------------------- | -------------- | ------------------------------------ |
+| macOS Apple Silicon | DMG            | `OK-Code-*-arm64.dmg`                |
+| macOS Intel         | DMG            | `OK-Code-*-x64.dmg` or `*.dmg` (x64) |
+| macOS               | ZIP (updater)  | `OK-Code-*-arm64.zip`, etc.          |
+| Linux x64           | AppImage       | `*.AppImage`                         |
+| Windows x64         | NSIS installer | `*.exe`                              |
 
 ## Electron updater metadata
 
 | File               | Purpose                                                   |
 | ------------------ | --------------------------------------------------------- |
 | `latest-mac.yml`   | macOS update manifest (merged from per-arch builds in CI) |
-| `latest-linux.yml` | Linux update manifest                                     |
-| `latest.yml`       | Windows update manifest                                   |
+| `latest-linux.yml` | Linux update manifest (when published)                    |
+| `latest.yml`       | Windows update manifest (when published)                  |
 | `*.blockmap`       | Differential download block maps                          |
 
 ## Checksums