fix: pass SERVICE_ACCOUNT env vars to signing steps

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: Aleksandr Slapoguzov

.github/workflows/release.yml

@@ -51,12 +51,18 @@ jobs:
           chmod +x codesign-client-linux-amd64
 
       - name: Sign Windows binary
+        env:
+          SERVICE_ACCOUNT_NAME: ${{ vars.SERVICE_ACCOUNT_NAME }}
+          SERVICE_ACCOUNT_TOKEN: ${{ secrets.SERVICE_ACCOUNT_TOKEN }}
         run: |
           unzip dist/bin/codex-acp-x64-windows.zip -d dist/bin/windows-x64
-          ./codesign-client-linux-amd64 -extensions "jsign_replace=true" dist/bin/windows-x64/codex-acp.exe
-          cd dist/bin/windows-x64 && zip -r ../codex-acp-x64-windows.zip codex-acp.exe && cd -
+          ./codesign-client-linux-amd64 -extensions "jsign_replace=true" dist/bin/windows-x64/codex-acp-x64-windows.exe
+          cd dist/bin/windows-x64 && zip -r ../codex-acp-x64-windows.zip codex-acp-x64-windows.exe && cd -
 
       - name: Sign macOS binaries
+        env:
+          SERVICE_ACCOUNT_NAME: ${{ vars.SERVICE_ACCOUNT_NAME }}
+          SERVICE_ACCOUNT_TOKEN: ${{ secrets.SERVICE_ACCOUNT_TOKEN }}
         run: |
           ./codesign-client-linux-amd64 \
             -denoted-content-type="content-type=application/x-mac-zip" \