feat: add CRX3 packaging via private key secret, bump v1.0.1

.gitea/workflows/build.yaml

@@ -15,20 +15,30 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Package Extension
+        env:
+          CRX_KEY: ${{ secrets.CRX_PRIVATE_KEY }}
         run: |
-          which zip >/dev/null 2>&1 || (apt-get update && apt-get install -y zip)
           mkdir -p dist
-          zip -r dist/gq-to-org-redirector.zip manifest.json rules.json README.md
+          if [ -n "$CRX_KEY" ]; then
+            printf "%s\n" "$CRX_KEY" > /tmp/key.pem
+            npx -y crx3 -p /tmp/key.pem -o dist/gq-to-org-redirector.crx -z dist/gq-to-org-redirector.zip manifest.json rules.json
+            rm -f /tmp/key.pem
+          else
+            echo "::warning::CRX_PRIVATE_KEY secret is not set, generating ephemeral key"
+            npx -y crx3 -o dist/gq-to-org-redirector.crx -z dist/gq-to-org-redirector.zip manifest.json rules.json
+          fi
 
       - name: Upload Artifact
         uses: actions/upload-artifact@v3
         with:
           name: gq-to-org-redirector
-          path: dist/gq-to-org-redirector.zip
+          path: dist/
 
       - name: Publish Release
         if: startsWith(github.ref, 'refs/tags/v')
         uses: akkuman/gitea-release-action@v1
         with:
-          files: dist/gq-to-org-redirector.zip
+          files: |
+            dist/gq-to-org-redirector.crx
+            dist/gq-to-org-redirector.zip
           name: Release ${{ github.ref_name }}