v4.3.0: package the desktop app with verifiable installers

publish.sh builds the GUI with the gui-release profile, names it zagan-bet-gui-<version>-<platform>-<arch>, and renders a bash and a PowerShell installer next to each app. Both embed the app's SHA-256, verify the file (or fetch it), install per-user and add a launcher: a desktop entry plus an SVG icon on Linux, a Start-menu shortcut on Windows.

The download page gains a Desktop app section with the apps and installers, keeps the terminal client and server, links the public git repository for the GPL source, and lists every file in the sha256sum block. deploy.sh verifies all four artifact kinds. Publishing refuses a dirty tree so the linked history matches the binaries.

1 files changed, 7 insertions, 2 deletions

diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index 99129ad..b18d462 100755
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-# Upload web/ and verify every published artifact over the public URL.
+# Upload web/ and verify every published artifact (GUI app and installers,
+# terminal client and server) over the public URL.
 #
 # Usage:
 #   ./scripts/deploy.sh user@host:/srv/zagan.bet https://zagan.bet/
@@ -50,7 +51,11 @@ done
 [ -f web/index.php ] || die "web/index.php is missing"
 
 shopt -s nullglob
-artifacts=(web/bin/client/zagan-bet-* web/bin/server/zagan-bet-*)
+artifacts=(
+  web/bin/gui/zagan-bet-*
+  web/bin/client/zagan-bet-*
+  web/bin/server/zagan-bet-*
+)
 shopt -u nullglob
 [ ${#artifacts[@]} -gt 0 ] || die "no artifacts in web/bin; run scripts/publish.sh first"