ci(one): drop empty APPLE_* env to prevent codesign import failure

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: hotlong

.github/workflows/one.yml

@@ -75,14 +75,7 @@ jobs:
 
       - name: Build Tauri bundle
         env:
-          # macOS signing (provide via repo secrets to enable notarization).
-          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
-          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
-          APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
-          APPLE_ID: ${{ secrets.APPLE_ID }}
-          APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
-          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
-          # Tauri updater key (optional).
+          # Tauri updater key (no-password key generated via `signer generate --ci`).
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ""
         run: pnpm --filter @objectos/one tauri build --target ${{ matrix.target }}