Release packaging: the MSI's licence files get a component GUID, the mounted dmg is verified without --strict, shellcheck follows env.sh

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

packaging/.shellcheckrc

@@ -0,0 +1,3 @@
+# shellcheck config for the packaging scripts (CI: .github/workflows/packaging-lint.yml).
+source-path=SCRIPTDIR
+external-sources=true

packaging/macos/package.sh

@@ -97,7 +97,8 @@ plutil -lint "$MNT/SolveCraft.app/Contents/Info.plist"
 case "$ARCH" in universal) WANT=(arm64 x86_64) ;; aarch64) WANT=(arm64) ;; *) WANT=(x86_64) ;; esac
 lipo "$MNT/SolveCraft.app/Contents/MacOS/SolveCraft" -verify_arch "${WANT[@]}"
 test -s "$MNT/SolveCraft.app/Contents/Resources/Licenses/THIRD-PARTY-LICENSES.txt"
-codesign --verify --strict --deep "$MNT/SolveCraft.app"
+# Not --strict: the mounted HFS volume adds Finder info, which strict verification rejects.
+codesign --verify --deep --verbose=2 "$MNT/SolveCraft.app"
 "$MNT/SolveCraft.app/Contents/MacOS/SolveCraft" --version
 hdiutil detach "$MNT"
 

packaging/windows/solvecraft.wxs

@@ -110,7 +110,8 @@
       <Component Id="SolvecraftCli">
         <File Id="SolvecraftCliExe" Source="$(var.BinDir)\solvecraft-cli.exe" KeyPath="yes" />
       </Component>
-      <Component Id="SolvecraftLicences">
+      <!-- Several unversioned files: an explicit GUID (WIX0367). -->
+      <Component Id="SolvecraftLicences" Guid="CDEDEE8D-4BE9-4872-A2EA-EE623A6C7E91">
         <File Id="LicenseMit" Source="$(var.BinDir)\LICENSE-MIT" KeyPath="yes" />
         <File Id="LicenseApache" Source="$(var.BinDir)\LICENSE-APACHE" />
         <File Id="Notice" Source="$(var.BinDir)\NOTICE" />