Bubblewrap TWA config for chat.sune, plus a manually dispatched workflow
that builds, signs, verifies against assetlinks.json, attests provenance
and publishes the release for the tag given as input.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
