[Bug]: Windows SmartScreen Warning on Executable Launch

[majockbim]

Users downloading spectrum.exe are being flagged by Windows Defender
SmartScreen with an "Unknown Publisher" or "Windows protected your PC"
warning.

This is expected behavior for unsigned executables from unrecognized
publishers, it does not indicate malware.

Root Cause

Spectrum is not code-signed with a trusted certificate. Windows flags
any unsigned executable from the internet.

Milestones

• Research code signing options (SignTool, self-signed vs trusted CA)
• Investigate free/low-cost signing certificates for open source projects
• Explore GitHub Actions automated signing pipeline
• Implement signing in the release workflow
• Verify SmartScreen warning is resolved post-signing