feat: add Intel Mac (x86_64) DMG build support

[AzimovS]

Summary

• Adds separate Intel Mac (x86_64-apple-darwin) DMG build to the CI/CD release pipeline
• Splits whisper-rs features by architecture: Metal+CoreML for Apple Silicon, CPU-only for Intel
• Adds latest.json merge step so both macOS architectures appear in the auto-updater manifest
• Updates all three macOS-related workflows (build.yml, release.yml, build-macos.yml)

Test plan

• Run build-macos.yml with target x86_64-apple-darwin, signing ON → verify signed DMG is produced
• Send Intel DMG to customer for testing (install, launch, record, transcribe)
• If customer confirms it works, bump version and run release.yml
• Verify latest.json contains both darwin-aarch64 and darwin-x86_64

Local verification done

• Full release build cross-compiles (cargo build --release --target x86_64-apple-darwin) ✅
• Binary confirmed x86_64 via file/lipo ✅
• whisper-rs features: raw-api only on x86_64, raw-api+metal+coreml on aarch64 ✅
• build.rs reports "CPU-only mode" for Intel ✅
• YAML syntax validated ✅
• aarch64 build unaffected (no regression) ✅

🤖 Generated with Claude Code

[AzimovS]

Code review

Found 3 issues:

1. Regex patterns in merge-update-manifest will never match actual tauri-action filenames. The patterns expect filenames containing aarch64-apple-darwin or x86_64-apple-darwin, but tauri-action produces names like meetily_aarch64.app.tar.gz (short arch identifier, no target triple). Verified against the v0.1.14 release assets. The merged latest.json will be missing all macOS (and likely Linux) platform entries, breaking auto-updates.

meetily/.github/workflows/release.yml

Lines 173 to 178 in d8c0fce

	const repo = "'"${{ github.repository }}"'";
	const baseUrl = `https://github/${repo}/releases/download/v${version}`;
	// Map platform patterns to Tauri platform keys
	const platformMap = [
	{ pattern: /aarch64-apple-darwin.*\.app\.tar\.gz$/, key: "darwin-aarch64" },

2. Signatures are never populated in the merged latest.json. The script finds .sig asset filenames but never downloads or reads their contents. The signature field is left as "" for any platform not already present in the partial latest.json. Tauri's auto-updater requires a non-empty signature to validate downloads -- empty signatures will cause update verification failures. The code comment // Signature will be downloaded separately if needed acknowledges this but the download is never implemented.

meetily/.github/workflows/release.yml

Lines 179 to 195 in d8c0fce

	{ pattern: /x86_64-apple-darwin.*\.app\.tar\.gz$/, key: "darwin-x86_64" },
	{ pattern: /x64.*\.nsis\.zip$|\.exe$/, key: "windows-x86_64" },
	{ pattern: /amd64\.AppImage\.tar\.gz$/, key: "linux-x86_64" },
	];
	for (const asset of assets) {
	for (const { pattern, key } of platformMap) {
	if (pattern.test(asset)) {
	const sigAsset = assets.find(a => a === asset + ".sig");
	let signature = "";
	// Signature will be downloaded separately if needed
	if (manifest.platforms[key]) {
	signature = manifest.platforms[key].signature || "";
	}
	manifest.platforms[key] = {
	signature,
	url: `https://github.com/${repo}/releases/download/v${version}/${asset}`

3. Dead baseUrl variable with typo. baseUrl is defined as `https://github/${repo}/...` (missing .com) but is never referenced -- the actual URL is built inline with the correct domain. Should be removed to avoid confusion.

meetily/.github/workflows/release.yml

Line 174 in d8c0fce

const baseUrl = `https://github/${repo}/releases/download/v${version}`;

🤖 Generated with Claude Code

_{- If this code review was useful, please react with 👍. Otherwise, react with 👎.}