fix(ci): skip macOS codesign verify without identity

.github/workflows/build-and-upload.yml

@@ -84,9 +84,12 @@ jobs:
           fi
 
           release_root="packages/electron-app/release"
-          shopt -s nullglob globstar
-
-          apps=("$release_root"/**/CodeNomad.app)
+          # macOS GitHub runners ship /bin/bash 3.2 which doesn't support `shopt -s globstar`.
+          # Use find to locate built app bundles instead of ** globs.
+          apps=()
+          while IFS= read -r -d '' app; do
+            apps+=("$app")
+          done < <(find "$release_root" -type d -name 'CodeNomad.app' -print0)
           if [ "${#apps[@]}" -eq 0 ]; then
             echo "No CodeNomad.app found under $release_root" >&2
             exit 1
@@ -111,6 +114,13 @@ jobs:
           set -euo pipefail
           shopt -s nullglob
 
+          # Dev CI builds typically don't have a macOS signing identity available.
+          # When no identity is present, electron-builder skips signing and strict verification will fail.
+          if security find-identity -p codesigning -v | grep -q "0 valid identities found"; then
+            echo "No valid macOS codesigning identity found; skipping codesign verification"
+            exit 0
+          fi
+
           tmp_dir=$(mktemp -d)
           trap 'rm -rf "$tmp_dir"' EXIT