chore: rebrand release artifacts cmux → programa (Phase 6h)

Rename cmux.entitlements → programa.entitlements (git mv + the 3 signing refs in
build-sign-upload.sh, release.yml, nightly.yml — pbxproj CODE_SIGN_ENTITLEMENTS is
empty, so the Xcode build is unaffected). Rename nightly DMG/artifact names
cmux-nightly-* → programa-nightly-* and the release dry-run artifact. Homebrew cask
refs left as-is (external repo, deprecated per board cleanup).

Author: arzafran

.github/workflows/nightly.yml

@@ -278,7 +278,7 @@ jobs:
           echo "NIGHTLY_MARKETING_VERSION=${NIGHTLY_MARKETING_VERSION}" >> "$GITHUB_ENV"
           echo "NIGHTLY_REMOTE_DAEMON_VERSION=${NIGHTLY_MARKETING_VERSION}" >> "$GITHUB_ENV"
 
-          NIGHTLY_DMG_IMMUTABLE="cmux-nightly-macos-${NIGHTLY_BUILD}.dmg"
+          NIGHTLY_DMG_IMMUTABLE="programa-nightly-macos-${NIGHTLY_BUILD}.dmg"
           echo "NIGHTLY_DMG_IMMUTABLE=${NIGHTLY_DMG_IMMUTABLE}" >> "$GITHUB_ENV"
 
           prepare_variant() {
@@ -393,7 +393,7 @@ jobs:
             echo "Missing APPLE_SIGNING_IDENTITY secret" >&2
             exit 1
           fi
-          ENTITLEMENTS="cmux.entitlements"
+          ENTITLEMENTS="programa.entitlements"
           for APP_PATH in \
             "build-universal/Build/Products/Release/Programa NIGHTLY.app"
           do
@@ -471,7 +471,7 @@ jobs:
 
           notarize_and_package \
             "build-universal/Build/Products/Release/Programa NIGHTLY.app" \
-            "cmux-nightly-macos.dmg" \
+            "programa-nightly-macos.dmg" \
             "$NIGHTLY_DMG_IMMUTABLE"
 
       - name: Upload dSYMs to Sentry
@@ -519,9 +519,9 @@ jobs:
         if: needs.decide.outputs.should_publish != 'true'
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
-          name: cmux-nightly-${{ needs.decide.outputs.short_sha }}
+          name: programa-nightly-${{ needs.decide.outputs.short_sha }}
           path: |
-            cmux-nightly-macos*.dmg
+            programa-nightly-macos*.dmg
             appcast.xml
             remote-daemon-assets/programad-remote-*
             appcast-universal.xml
@@ -552,10 +552,10 @@ jobs:
             - feed `appcast.xml`
             - compatibility feed `appcast-universal.xml` for older universal nightlies
 
-            [Download cmux-nightly-macos.dmg](https://github.com/darkroomengineering/programa/releases/download/nightly/cmux-nightly-macos.dmg)
+            [Download programa-nightly-macos.dmg](https://github.com/darkroomengineering/programa/releases/download/nightly/programa-nightly-macos.dmg)
           files: |
-            cmux-nightly-macos-${{ github.run_id }}*.dmg
-            cmux-nightly-macos.dmg
+            programa-nightly-macos-${{ github.run_id }}*.dmg
+            programa-nightly-macos.dmg
             appcast.xml
             remote-daemon-assets/programad-remote-*
             appcast-universal.xml

.github/workflows/release.yml

@@ -278,7 +278,7 @@ jobs:
             exit 1
           fi
           APP_PATH="build-universal/Build/Products/Release/Programa.app"
-          ENTITLEMENTS="cmux.entitlements"
+          ENTITLEMENTS="programa.entitlements"
           CLI_PATH="$APP_PATH/Contents/Resources/bin/programa"
           HELPER_PATH="$APP_PATH/Contents/Resources/bin/ghostty"
           if [ -f "$CLI_PATH" ]; then
@@ -379,7 +379,7 @@ jobs:
         if: steps.guard_release_assets.outputs.skip_upload != 'true' && github.event_name == 'workflow_dispatch'
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
-          name: cmux-release-dry-run
+          name: programa-release-dry-run
           path: |
             programa-macos.dmg
             appcast.xml

cmux.entitlements programa.entitlementscmux.entitlements renamed to programa.entitlements

@@ -47,7 +47,7 @@ fi
 
 TAG="$1"
 SIGN_HASH="A050CC7E193C8221BDBA204E731B046CDCCC1B30"
-ENTITLEMENTS="cmux.entitlements"
+ENTITLEMENTS="programa.entitlements"
 APP_PATH="build/Build/Products/Release/Programa.app"
 
 # --- Pre-flight ---