[vicenet]

Bumping the version in package.json on main now tags and publishes the release, then builds and attaches the installers. No manual tag needed.

• Pushes to main that change package.json: tags v and releases it. If that version is already released, the run stops early.
• Tag pushes and manual runs work as before.
• The macOS zip (the most downloaded file) is now built in CI and attached alongside the .exe and .pkg.
• The signed .zxp and Windows zip still need the local signing certificate, so upload those from npm run package.

Merging this releases v0.3.4, since main is already at that version.