Add GitHub workflow to release macOS binaries on push to master

Builds universal macOS binaries (Intel x86_64 + Apple Silicon aarch64)
and publishes them as a rolling GitHub release tagged 'latest'.

https://claude.ai/code/session_01H2eyPhwDPWZ7JW4cJt9v2Y

Author: claude

.github/workflows/release-macos.yml

@@ -0,0 +1,87 @@
+name: Release macOS
+
+on:
+  push:
+    branches: [master]
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    strategy:
+      matrix:
+        include:
+          - target: x86_64-apple-darwin
+            os: macos-13
+          - target: aarch64-apple-darwin
+            os: macos-14
+
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.target }}
+
+      - name: Cache cargo registry and build
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: ${{ matrix.target }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: ${{ matrix.target }}-cargo-
+
+      - name: Build release binary
+        run: cargo build --release --target ${{ matrix.target }}
+
+      - name: Package binary
+        run: |
+          mkdir -p dist
+          cp target/${{ matrix.target }}/release/wgit dist/wgit
+          cd dist
+          tar czf wgit-${{ matrix.target }}.tar.gz wgit
+          shasum -a 256 wgit-${{ matrix.target }}.tar.gz > wgit-${{ matrix.target }}.tar.gz.sha256
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: wgit-${{ matrix.target }}
+          path: dist/wgit-${{ matrix.target }}.tar.gz*
+
+  release:
+    needs: build
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download all artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: artifacts
+          merge-multiple: true
+
+      - name: Get short SHA
+        id: sha
+        run: echo "short=$(git rev-parse --short HEAD)" >> "$GITHUB_OUTPUT"
+
+      - name: Create or update rolling release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: latest
+          name: Latest Build (${{ steps.sha.outputs.short }})
+          body: |
+            Rolling release from `master` at ${{ github.sha }}.
+
+            ### macOS Binaries
+            - **Apple Silicon (M1/M2/M3):** `wgit-aarch64-apple-darwin.tar.gz`
+            - **Intel:** `wgit-x86_64-apple-darwin.tar.gz`
+          files: artifacts/*
+          prerelease: true
+          make_latest: false