fix(ci): comprehensive fixes for release workflow

1. macOS universal binary: Run even if non-macOS builds failed (armv7)
2. armv7: Removed from build matrix - neo_frizbee doesn't support 32-bit
3. Docker builds: Install GCC-10 on Ubuntu 20.04 for aws-lc-sys compatibility
4. crates.io: Made publishing non-blocking (unpublished git dependencies)
5. Desktop trigger: Remove unsupported inputs causing API errors

Refs #1874

Author: Test User

.github/workflows/release-comprehensive.yml

@@ -115,9 +115,10 @@ jobs:
           - os: [self-hosted, bigbox]
             target: aarch64-unknown-linux-musl
             use_cross: true
-          - os: [self-hosted, bigbox]
-            target: armv7-unknown-linux-musleabihf
-            use_cross: true
+          # NOTE: armv7 removed - neo_frizbee dependency doesn't support 32-bit
+          # - os: [self-hosted, bigbox]
+          #   target: armv7-unknown-linux-musleabihf
+          #   use_cross: true
           # macOS builds -- both run on self-hosted Apple Silicon Mac
           # (has zig installed for zlob dependency, can build both architectures)
           - os: [self-hosted, macOS]
@@ -375,8 +376,8 @@ jobs:
   create-universal-macos:
     name: Create macOS universal binaries
     needs: build-binaries
-    # Only run if both macOS builds succeeded
-    if: needs.build-binaries.result == 'success'
+    # Run if macOS builds completed (even if other targets failed)
+    if: always() && needs.build-binaries.result != 'cancelled'
     runs-on: [self-hosted, macOS]
     steps:
       - name: Download x86_64 macOS binaries
@@ -434,8 +435,8 @@ jobs:
   sign-and-notarize-macos:
     name: Sign and notarize macOS binaries
     needs: create-universal-macos
-    # Only run if universal binaries were created successfully
-    if: needs.create-universal-macos.result == 'success'
+    # Run if universal binary creation completed (even if other jobs failed)
+    if: always() && needs.create-universal-macos.result == 'success'
     runs-on: [self-hosted, macOS]
     steps:
       - name: Checkout repository
@@ -606,11 +607,7 @@ jobs:
               owner: 'terraphim',
               repo: 'terraphim-ai-desktop',
               workflow_id: 'release-comprehensive.yml',
-              ref: 'main',
-              inputs: {
-                triggered_by: 'terraphim-ai-release',
-                source_tag: tag
-              }
+              ref: 'main'
             });
             
             console.log('Desktop release workflow triggered successfully');
@@ -630,6 +627,8 @@ jobs:
   verify-release-assets:
     name: Verify release assets
     needs: [build-binaries, sign-and-notarize-macos, build-debian-packages]
+    # Run even if some builds failed, but verify critical assets exist
+    if: always() && needs.sign-and-notarize-macos.result == 'success'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -684,8 +683,8 @@ jobs:
   create-release:
     name: Create GitHub release
     needs: [verify-versions, verify-release-assets]
-    # Only create release if version verification and asset verification passed
-    if: success()
+    # Create release if version and assets verification passed
+    if: always() && needs.verify-versions.result == 'success' && needs.verify-release-assets.result == 'success'
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -1048,6 +1047,8 @@ jobs:
     # Use always() to run even if some upstream jobs failed, but only for version tags
     if: always() && startsWith(github.ref, 'refs/tags/v') && needs.verify-versions.result == 'success'
     # NOTE: environment removed to avoid approval requirements
+    # Publishing may fail due to unpublished git dependencies (e.g., fff-search)
+    continue-on-error: true
 
     steps:
       - name: Checkout repository

docker/Dockerfile.multiarch

@@ -50,8 +50,20 @@ RUN apt-get update -qq && apt-get install -yqq --no-install-recommends \
     pkg-config \
     musl-tools \
     musl-dev \
+    software-properties-common \
     && rm -rf /var/lib/apt/lists/*
 
+# Ubuntu 20.04 ships GCC 9 which has a memcmp bug (GCC #95189) that aws-lc-sys
+# refuses to compile with. Install GCC 10 from the ubuntu-toolchain-r PPA.
+RUN if [ "${UBUNTU_VERSION}" = "20.04" ]; then \
+        add-apt-repository -y ppa:ubuntu-toolchain-r/test && \
+        apt-get update -qq && \
+        apt-get install -yqq --no-install-recommends gcc-10 g++-10 && \
+        update-alternatives --install /usr/bin/gcc gcc /usr/bin/gcc-10 100 && \
+        update-alternatives --install /usr/bin/g++ g++ /usr/bin/g++-10 100 && \
+        rm -rf /var/lib/apt/lists/*; \
+    fi
+
 # Install cross-compilation tools based on target architecture
 RUN case "${TARGETARCH}" in \
     "arm64") \