[Juliusolsson05]

Summary

• bump package version to 0.0.2-beta.1 so the next beta artifact is distinct from the unsigned 0.0.1 beta
• add manual release inputs for beta tag/name
• mark workflow-created GitHub releases as prereleases
• fail published macOS releases when signing/notarization secrets are missing instead of silently uploading Gatekeeper-blocked artifacts

Current blocker

GitHub currently only has SUBMODULE_PAT configured. To publish a Mac build users can open normally, add these secrets before running with publish_release=true:

• CSC_LINK
• CSC_KEY_PASSWORD
• APPLE_ID
• APPLE_APP_SPECIFIC_PASSWORD
• APPLE_TEAM_ID

Notes

This keeps unsigned artifact builds possible when publish_release=false, but prevents another published beta release from being unsigned/unnotarized.