fix(release): stop publishing macOS app

[roodboi]

Summary

• remove the macOS app build/sign/notarize/upload job from Hack releases
• remove the standalone macOS release workflow and semantic-release version coupling
• retain the app source and local development tools, but document them as unsupported and unpublished
• add a regression test for the CLI/runtime-only release boundary

Verification

• bun test tests/release-boundary.test.ts tests/macos-ghostty-source.test.ts tests/release-config.test.ts
• bun run check
• git diff --check

Release decision

This is a fix and should trigger a patch release. The resulting release must publish the supported CLI/runtime/Homebrew artifacts without scheduling a macOS app job.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-02T15:06:31.445849Z	7d7e52b	PR opened
🔒 Security Review	✅ Completed 2026-09-02T15:07:29.279471Z	7d7e52b	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.