Mac App Release

Use for BlackBar, RepoBar, CodexBar, Trimmy, and similar Sparkle-updated macOS apps.

Rules

Work from the app repo.
Read .mac-release.env; it is the repo-owned release manifest.
Use scripts/mac-release from this skill for shared release/appcast/verify work.
Keep app-specific build/package/sign behavior in repo scripts unless it is already manifest-driven.
Never print private key material.
Prefer Keychain Sparkle signing. SPARKLE_PRIVATE_KEY_FILE is an explicit override only.