feat(packaging): add macOS release builds, Homebrew tap support, and Windows service/MSI

[CraZySacX]

Summary

macOS (previous commits)

• Add native aarch64-apple-darwin build job for bartoc and barto-cli on macos-latest (Apple Silicon runner)
• Add Homebrew formula templates (packaging/homebrew/bartoc.rb.tmpl, packaging/homebrew/barto-cli.rb.tmpl) with brew services / launchd integration for bartoc
• Add update-homebrew CI job that computes SHA256 checksums and pushes generated formulas to the rustyhorde/homebrew-barto tap on each release
• Update pre-release and release jobs to collect macOS tarballs alongside existing Linux assets
• Also includes: v1.4.9 version bump, DEB/RPM bartoc post-install fix, AUR PKGBUILD gdb-add-index suppression

Windows service/MSI (previous commits)

• bartoc/src/service.rs — new Windows-only SCM dispatcher using the windows-service crate; clean stop via CancellationToken propagation
• --service flag activates SCM dispatch mode; without it, console behavior is unchanged on all platforms
• bartoc/src/runtime/mod.rs — run() gains service_token parameter so an SCM Stop cancels the retry loop and per-connection tokens; load_windows_credentials() reads secrets from Windows Credential Manager at startup (mirrors bartoc-launcher.ps1)
• bartoc/src/main.rs — removes #[tokio::main]; checks argv for --service before building the tokio runtime
• bartoc/src/db/mod.rs — create_dir_all on the redb parent path so %ProgramData%\bartoc\ is created on first run
• bartoc/wix/main.wxs — WiX 3.x MSI installer: binary to %ProgramFiles%\barto\bartoc\, delayed-auto-start service with restart-on-failure, example config to %ProgramData%\bartoc\
• packaging/wix/README.Windows.md — setup guide: MSI install, dedicated service account, secret management, manual sc create
• .github/workflows/release.yml — new build-windows job (MSVC target, cargo-wix); pre-release and release jobs include Windows .exe and .msi artifacts
• .github/workflows/barto.yml — clippy-windows target changed to x86_64-pc-windows-msvc (required for windows-service linker)
• Workspace deps: keyring-core 1.0.0, windows-native-keyring-store 1.1.0, windows-service 0.8.1

Nightly clippy fixes and PowerShell CI scripts (previous commits)

• bartoc/src/runtime/mod.rs — wrap std::env::set_var in unsafe block (required by Rust 2024 edition); add #[allow(unsafe_code)] to load_windows_credentials; move const items before the match statement to fix items_after_statements
• bartoc/src/service.rs — gate allow(non_exhaustive_omitted_patterns) on all(feature = "unstable", nightly) to match the deny condition; ServiceControl is #[non_exhaustive] from an external crate so a wildcard arm alone doesn't satisfy the lint
• scripts/run_all.ps1 — PowerShell port of scripts/run_all.fish; uses param() switches (-NoTest, -NoCoverage, -NoDocs, -NoInstall, -NoMusl, -Unstable, -Clean) and $PSScriptRoot for sibling script discovery
• scripts/run_install.ps1 — PowerShell port of scripts/run_install.fish
• scripts/run_musl.ps1 — PowerShell port of scripts/run_musl.fish; adapted for Windows Docker Desktop (drops sudo chown, uses $env:USERPROFILE paths, invokes docker via arg array)

CI fix: cargo-wix MSI generation (previous commit)

• .github/workflows/release.yml — replace --bin-path target\x86_64-pc-windows-msvc\release with --target x86_64-pc-windows-msvc; --bin-path is the WiX Toolset compiler directory flag, not the Rust binary output path — candle/light are already in PATH on windows-latest

WiX XML fix (previous commit)

• bartoc/wix/main.wxs — remove --service from inside an XML comment; the XML spec forbids -- within comments, causing WiX candle to abort with exit code 104

Expose candle errors in CI (latest commit)

• .github/workflows/release.yml — add --nocapture to the cargo wix invocation so candle/light output streams directly to CI logs; the previous -e WixUtilExtension attempt was incorrect (WixUtilExtension is included by default by cargo-wix) and has been reverted

Prerequisites before first release

• Create rustyhorde/homebrew-barto GitHub repo with a Formula/ directory
• Create a fine-grained PAT (barto-homebrew-tap-push) scoped to rustyhorde/homebrew-barto with Contents: Read and write
• Add PAT as HOMEBREW_TAP_TOKEN secret in rustyhorde/barto

Test plan

macOS

• Verify build-macos job succeeds on an RC tag push and uploads both .tar.gz artifacts
• After a full release tag, verify update-homebrew pushes bartoc.rb and barto-cli.rb to the tap
• On Apple Silicon Mac: brew tap rustyhorde/barto && brew install rustyhorde/barto/bartoc && bartoc --version
• Confirm brew services start bartoc loads the launchd plist

Windows

• Verify build-windows job succeeds on an RC tag push and uploads .exe and .msi to pre-release assets
• Install MSI on a Windows VM: msiexec /i bartoc-VERSION-x86_64.msi SERVICEACCOUNT=".\bartoc_svc" SERVICEPASSWORD="..." /l*v install.log
• Verify service is registered in SCM and starts: sc query bartoc shows RUNNING
• Set secrets as service account user: barto-cli secrets set BARTOC_HMAC_KEY etc.; confirm tracing log shows credentials loaded from Credential Manager
• sc stop bartoc — verify clean shutdown; sc delete bartoc; verify uninstall removes all files
• Console mode: bartoc.exe --config-absolute-path ... (no --service) works as before

PowerShell scripts

• scripts\run_all.ps1 -? — verify help output
• scripts\run_musl.ps1 -? — verify help output
• scripts\run_all.ps1 -NoTest -NoCoverage -NoDocs -NoInstall -NoMusl — runs fmt + clippy + build only

🤖 Generated with Claude Code

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.73%. Comparing base (efc8638) to head (2fdcc35).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #216   +/-   ##
=======================================
  Coverage   97.73%   97.73%           
=======================================
  Files          31       31           
  Lines        4804     4804           
=======================================
  Hits         4695     4695           
  Misses        109      109           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.