ci(release): auto-submit winget-pkgs PR on every tagged release

After the first manual wingetcreate submission (PR
microsoft/winget-pkgs#379201 for v0.4.0), every subsequent tagged
release should bump the community winget manifest automatically.

Uses vedantmgoyal9/winget-releaser, runs after the build matrix
completes, picks up the gitwink_*_x64-setup.exe NSIS installer from
the freshly published GitHub Release, and opens a PR against
microsoft/winget-pkgs as var-gg.

The WINGET_TOKEN repo secret needs to be set to a GitHub PAT with
public_repo scope for the var-gg account. Prereleases (tags with a
hyphen) are skipped.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: var-gg

.github/workflows/release.yml

@@ -86,3 +86,20 @@ jobs:
           releaseDraft: false
           prerelease: false
           args: ${{ matrix.args }}
+
+  # Open a PR against microsoft/winget-pkgs with the bumped NSIS installer.
+  # First-time submission was a manual wingetcreate run; this job keeps it
+  # current on every tagged release. Skips if WINGET_TOKEN isn't set (e.g.
+  # forks without the secret), so it never blocks a release.
+  publish-winget:
+    name: Update winget-pkgs manifest
+    needs: build
+    runs-on: ubuntu-latest
+    if: ${{ !contains(github.ref_name, '-') }}  # skip prereleases like v0.4.0-rc1
+    steps:
+      - name: Submit PR to microsoft/winget-pkgs
+        uses: vedantmgoyal9/winget-releaser@v2
+        with:
+          identifier: var-gg.gitwink
+          installers-regex: 'gitwink_.*_x64-setup\.exe$'
+          token: ${{ secrets.WINGET_TOKEN }}