Distribution & packaging (Go)

[bradgessler]

Ship the Go client everywhere with minimal friction (the big win over Tebako).

• GoReleaser: static binaries for all OS/arch, archives, checksums, GitHub releases.
• Homebrew tap (brew install terminalwire/tap/terminalwire), Scoop/winget (Windows), nfpm .deb/.rpm, AUR/Nix optional, curl | sh installer (terminalwire.sh already exists).
• Code signing/notarization: Apple Developer ID + notarization (Gatekeeper), Windows Authenticode (SmartScreen). This was a Tebako pain point.
• Wire up the self-update channel.

[bradgessler]

Done; moved to terminalwire/cli: signed-manifest trust chain + alpha/beta/stable channels + installer. Tracked there by #1–#3 of the evergreen epic (#9).