Add macOS arm64 CLI release workflow

[mondary]

Summary

• add a dedicated GitHub Actions workflow to build and package CodexBarCLI for macOS Apple Silicon (arm64)
• run a smoke test to verify the binary is arm64 and executable
• upload release assets (.tar.gz + .sha256) and workflow artifacts for manual runs
• document Apple Silicon CLI download path in README and CLI docs

Why

This makes Apple Silicon users (including MacBook Air M5) first-class release targets with ready-to-download CLI artifacts from GitHub Releases.

Validation

• local build: swift build -c release --arch arm64 --product CodexBarCLI

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f708e73fa1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Sanitize ref name before using it in asset filename

When this workflow is run via workflow_dispatch, GITHUB_REF_NAME is typically the selected branch name, and branch names commonly contain / (for example feature/foo). Interpolating that value directly into ASSET makes tar czf "$ASSET" treat part of the filename as subdirectories, which fails because those directories are not created, so the packaging step breaks and manual runs cannot produce artifacts from such branches.

Useful? React with 👍 / 👎.

[mondary]

Test status update:\n- validated local Apple Silicon launch path using \n- process stays alive during runtime checks\n- release workflow updated to sanitize branch names for workflow_dispatch artifact packaging\n\nThis PR adds macOS arm64 CLI release artifacts to GitHub Releases for Apple Silicon users (including MacBook Air M5).

[mondary]

Addressed. The ref-name sanitization feedback is fixed in commit 8c666a6 () so branch names containing no longer break artifact packaging.

[mondary]

Addressed. The ref-name sanitization feedback is fixed in commit 8c666a6.

SAFE_REF_NAME="${REF_NAME//\//-}"

So workflow_dispatch branch names containing / no longer break artifact packaging.

[steipete]

Closed as covered by the consolidated release-workflow change landed on main in 0966118.

I kept this in the existing release CLI workflow rather than adding a second macOS-only workflow, and included both macOS arm64 and x86_64 tarballs plus smoke tests and docs/changelog updates.

Verified with local macOS arm64 CLI smoke, Linux CLI CI, and green CI after rerun. Thanks @mondary!