release 1.3.2: update from Gitea, Linux-only CLI, desktop app for Linux and Windows

The updater reads latest.json from Gitea, built by scripts/make-latest-json.py
against the Gitea API (no gh CLI). Release workflow builds the Linux CLI and
the Linux+Windows desktop app, signs the updater artifacts and attaches
everything to the release.

Needs the repo secrets TAURI_SIGNING_PRIVATE_KEY and
TAURI_SIGNING_PRIVATE_KEY_PASSWORD, which I could not set (secret-store writes
are reserved for the user) - set them from ~/.tauri/guara-updater.key and
.pass before pushing a tag.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

scripts/test_make_latest_json.py

@@ -8,37 +8,34 @@ spec = importlib.util.spec_from_file_location("m", os.path.join(os.path.dirname(
 m = importlib.util.module_from_spec(spec)
 spec.loader.exec_module(m)
 
-BASE = "https://github.com/x/y/releases/download/v1.3.0/"
+BASE = "https://git.lucasrguerra.dev.br/lucasrguerra/guara/releases/download/v1.3.2/"
 
 
-def assets(version="1.3.0"):
+def assets(version="1.3.2"):
     names = [p.format(v=version) for _, p in m.PLATFORMS]
     return {n: (BASE + n, f"assinatura-de-{n}\n") for n in names}
 
 
 class LatestJson(unittest.TestCase):
     def test_all_platforms_and_variants(self):
-        d = m.build("1.3.0", "### Novidades\n", assets(), "2026-10-23T12:00:00Z")
-        self.assertEqual(d["version"], "1.3.0")
+        d = m.build("1.3.2", "### Novidades\n", assets(), "2026-10-30T12:00:00Z")
+        self.assertEqual(d["version"], "1.3.2")
         self.assertEqual(d["notes"], "### Novidades")
         p = d["platforms"]
-        for k in ("linux-x86_64", "linux-x86_64-appimage", "windows-x86_64", "windows-x86_64-nsis",
-                  "windows-x86_64-msi", "darwin-aarch64", "darwin-x86_64"):
+        for k in ("linux-x86_64", "linux-x86_64-appimage", "windows-x86_64", "windows-x86_64-nsis"):
             self.assertIn(k, p)
-        # a chave genérica do Windows aponta para o instalador NSIS, não para o MSI
         self.assertTrue(p["windows-x86_64"]["url"].endswith("x64-setup.exe"))
-        self.assertTrue(p["windows-x86_64-msi"]["url"].endswith(".msi"))
-        self.assertEqual(p["linux-x86_64"]["signature"], "assinatura-de-Guara_1.3.0_amd64.AppImage")
+        self.assertEqual(p["linux-x86_64"]["signature"], "assinatura-de-Guara_1.3.2_amd64.AppImage")
 
     def test_missing_package_is_left_out(self):
         a = assets()
-        del a["Guara_1.3.0_x64.app.tar.gz"]
-        d = m.build("1.3.0", "", a, "2026-10-23T12:00:00Z")
-        self.assertNotIn("darwin-x86_64", d["platforms"])
-        self.assertIn("darwin-aarch64", d["platforms"])
+        del a["Guara_1.3.2_x64-setup.exe"]
+        d = m.build("1.3.2", "", a, "2026-10-30T12:00:00Z")
+        self.assertNotIn("windows-x86_64", d["platforms"])
+        self.assertIn("linux-x86_64", d["platforms"])
 
     def test_other_versions_do_not_leak(self):
-        d = m.build("1.3.0", "", assets("1.2.0"), "2026-10-23T12:00:00Z")
+        d = m.build("1.3.2", "", assets("1.2.0"), "2026-10-30T12:00:00Z")
         self.assertEqual(d["platforms"], {})