fix(release): correct lipo architecture verification arguments

[lidge-jun]

Summary

• Fix the lipo architecture assertion introduced in fix(desktop): preserve packaged CLI and assemble universal sidecar #5530: -verify_arch consumes every following argument as an architecture, so the input filename must precede it.
• Update the workflow assertion to cover the complete argument order. No signing, publication or permission changes.
• Owner-authorized immediate dev integration, then main/preview carry; CI remains required for publication.

Verification

• Preview dry-run 35720315462, macOS job106721669999, printed the invalid architecture error and lipo <input_file> <command> usage. The universal binary creation completed before this assertion failed.
• Linux AppImage/deb packaging and extracted CLI byte equality/version probe passed in this run.
• Source/security review; hosted verification pending. Local tests/typechecks/builds/probes: NOT RUN by owner instruction. Commit/push use --no-verify.

Checklist

• Scope stays focused and avoids unrelated cleanup.
• Docs or release notes were updated when needed: existing architecture contract is unchanged.
• Security-sensitive changes were reviewed for secrets, auth, and unsafe defaults.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Repository: lidge-jun/opencodex/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: dc5dfb61-a233-43db-a988-0263338384c7

📥 Commits

Reviewing files that changed from the base of the PR and between a5e8047 and bda9bef.

📒 Files selected for processing (2)

• .github/workflows/release.yml
• tests/ci-workflows/release-desktop-scripts.test.ts

 _______________________________________________
< Somewhere, a linter just sighed dramatically. >
 -----------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

✅ Deterministic PR hygiene checks passed.