release: v0.3.7 macOS signing fix

[XingYu-Zhong]

Summary

Retry the 0.3.7 release with the macOS signing fix from #1237.

Changes

• remove stale Kun binary launchers when their hoisted duplicate packages are pruned
• reject binary-name ownership collisions and dangling packaged symlinks before signing
• preserve launchers owned by retained Kun packages

Tests

• macOS x64/arm64 ad-hoc package and host-native handoff smoke passed on fix(release): remove hoisted Kun binary shims #1237
• Linux x64 and ARM64 package checks passed on fix(release): remove hoisted Kun binary shims #1237
• Windows NSIS build passed and installer migration is running on fix(release): remove hoisted Kun binary shims #1237
• 24 targeted after-pack/runtime dependency tests passed locally
• changed-file ESLint, file-line gate, and diff check passed