Include publish notes when releasing builds

.github/actions/prepare-release-artifacts/action.yml

@@ -0,0 +1,61 @@
+name: Prepare Release Artifacts
+description: Download, flatten, and verify release artifacts for publishing
+
+runs:
+  using: composite
+  steps:
+    - name: Download all artifacts
+      uses: actions/download-artifact@v4
+      with:
+        path: artifacts
+
+    - name: List downloaded artifacts
+      shell: bash
+      run: |
+        echo "=== All artifacts downloaded ==="
+        ls -lR artifacts/
+        echo ""
+        echo "=== Windows artifacts only ==="
+        ls -l artifacts/windows-*/
+
+    - name: Flatten artifacts (exclude unsigned Windows installers)
+      shell: bash
+      run: |
+        mkdir -p staging
+        # Copy all files except those from unsigned Windows artifact directories
+        find artifacts -type f ! -path "*/windows-*-unsigned-*/*" -exec cp {} staging/ \;
+        echo ""
+        echo "=== Files copied to staging ==="
+        ls -lh staging/
+        echo ""
+        echo "=== Windows installers in staging ==="
+        ls -lh staging/YACReader*.exe || echo "No Windows installers found"
+
+    - name: Verify Windows installer signatures
+      shell: bash
+      run: |
+        echo "=== Installing osslsigncode to verify signatures ==="
+        sudo apt-get update
+        sudo apt-get install -y osslsigncode
+
+        echo ""
+        echo "=== Checking signatures on Windows installers ==="
+        for installer in staging/YACReader*.exe; do
+          if [ -f "$installer" ]; then
+            echo "Checking: $(basename $installer)"
+            echo "File size: $(stat -c%s $installer) bytes"
+
+            # Try to extract signature info
+            if osslsigncode verify -in "$installer" 2>&1 | grep -q "Signature verification: ok"; then
+              echo "  ✓ SIGNED - Signature verified successfully"
+              osslsigncode verify -in "$installer" 2>&1 | grep -E "(Signed|Signer|Timestamp)"
+            else
+              echo "  ✗ UNSIGNED or INVALID - No valid signature found"
+              osslsigncode verify -in "$installer" 2>&1 | head -20
+            fi
+            echo ""
+          fi
+        done
+
+        echo "=== Summary ==="
+        echo "Total installers in staging: $(ls staging/YACReader*.exe 2>/dev/null | wc -l)"