added website

Distribution/ExportOptions.plist

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+<key>method</key><string>developer-id</string>
+<key>signingStyle</key><string>automatic</string>
+</dict></plist>

Distribution/notarize.sh

@@ -0,0 +1,33 @@
+#!/bin/zsh
+set -euo pipefail
+
+APP_PATH="${1:-}"
+PROFILE="${NOTARY_PROFILE:-SonarDesk-Notary}"
+
+if [[ -z "$APP_PATH" || ! -d "$APP_PATH" ]]; then
+  echo "Usage: NOTARY_PROFILE=SonarDesk-Notary $0 /path/to/SonarDesk.app" >&2
+  exit 64
+fi
+
+APP_PATH="$(cd "$(dirname "$APP_PATH")" && pwd)/$(basename "$APP_PATH")"
+WORK_DIR="$(mktemp -d)"
+ZIP_PATH="$WORK_DIR/SonarDesk.zip"
+trap 'rm -rf "$WORK_DIR"' EXIT
+
+echo "Verifying Developer ID signature and hardened runtime..."
+codesign --verify --deep --strict --verbose=2 "$APP_PATH"
+spctl --assess --type execute --verbose=4 "$APP_PATH" || true
+
+echo "Preparing notarization upload..."
+ditto -c -k --keepParent "$APP_PATH" "$ZIP_PATH"
+
+echo "Submitting to Apple notary service..."
+xcrun notarytool submit "$ZIP_PATH" --keychain-profile "$PROFILE" --wait
+
+echo "Stapling notarization ticket..."
+xcrun stapler staple "$APP_PATH"
+xcrun stapler validate "$APP_PATH"
+
+echo "Final Gatekeeper assessment..."
+spctl --assess --type execute --verbose=4 "$APP_PATH"
+echo "SonarDesk is signed, notarized, and stapled."