fix(ci): pin Windows code signing to stable sslcom/esigner-codesign@v1.3.2 (#2141)

* chore(device-agent): align package.json version to 1.0.0 baseline

CI overrides this at build time, but keeping it in sync with what
the version detection computes (1.0.0 since no clean semver tags exist).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(ci): use stable sslcom/esigner-codesign@v1.3.2 instead of @develop

The @develop branch broke Windows code signing — the action stopped
passing -username and -password flags to CodeSignTool. Pinning to the
latest stable tag v1.3.2.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: tofikwest

.github/workflows/device-agent-release.yml

@@ -180,15 +180,15 @@ jobs:
         run: bun run package:win
 
       - name: Setup SSL.com eSigner CodeSignTool
-        uses: sslcom/esigner-codesign@develop
+        uses: sslcom/esigner-codesign@v1.3.2
         with:
           command: get_credential_ids
           username: ${{ secrets.ESIGNER_USERNAME }}
           password: ${{ secrets.ESIGNER_PASSWORD }}
           totp_secret: ${{ secrets.ESIGNER_TOTP_SECRET }}
 
       - name: Sign Windows EXE with SSL.com eSigner
-        uses: sslcom/esigner-codesign@develop
+        uses: sslcom/esigner-codesign@v1.3.2
         with:
           command: sign
           username: ${{ secrets.ESIGNER_USERNAME }}