feat: enable system tray for macOS/Windows builds

Split goreleaser into 3 builds:
- macOS: CGO_ENABLED=1 + withtray (systray needs Cocoa)
- Windows: CGO_ENABLED=0 + withtray (systray uses pure Go syscalls)
- Linux: CGO_ENABLED=0, no tray

CI runner changed from ubuntu-latest to macos-latest for native
darwin CGO support.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: fengyily

.github/workflows/release.yml

@@ -18,7 +18,7 @@ permissions:
 jobs:
   release:
     name: GoReleaser
-    runs-on: ubuntu-latest
+    runs-on: macos-latest
     steps:
       - uses: actions/checkout@v4
         with:

.goreleaser.yaml

@@ -3,25 +3,58 @@ version: 2
 project_name: shield-cli
 
 builds:
-  - main: .
+  # macOS: CGO required for systray (Cocoa framework)
+  - id: macos
+    main: .
     binary: shield
+    tags:
+      - withtray
     env:
-      - CGO_ENABLED=0
+      - CGO_ENABLED=1
     goos:
       - darwin
-      - linux
+    goarch:
+      - amd64
+      - arm64
+    ldflags:
+      - -s -w
+      - -X shield-cli/cmd.Version={{.Version}}
+      - -X shield-cli/cmd.GitCommit={{.Commit}}
+      - -X shield-cli/cmd.BuildTime={{.Date}}
+
+  # Windows: systray uses pure Go syscalls, no CGO needed
+  - id: windows
+    main: .
+    binary: shield
+    tags:
+      - withtray
+    env:
+      - CGO_ENABLED=0
+    goos:
       - windows
+    goarch:
+      - amd64
+      - arm64
+    ldflags:
+      - -s -w
+      - -X shield-cli/cmd.Version={{.Version}}
+      - -X shield-cli/cmd.GitCommit={{.Commit}}
+      - -X shield-cli/cmd.BuildTime={{.Date}}
+
+  # Linux: static build, no tray
+  - id: linux
+    main: .
+    binary: shield
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
     goarch:
       - amd64
       - arm64
       - "386"
     goarm:
       - "7"
-    ignore:
-      - goos: darwin
-        goarch: "386"
-      - goos: windows
-        goarch: arm
     ldflags:
       - -s -w
       - -X shield-cli/cmd.Version={{.Version}}