fix(desktop): enable asar integrity in Windows build by removing signAndEditExecutable false (#69179)

[webtecnica]

Summary

Remove signAndEditExecutable: false from the Windows electron-builder config to fix ASAR integrity metadata embedding.

Root Cause

The win build config in apps/desktop/package.json has:

"signAndEditExecutable": false

When set to false, electron-builder skips embedding ASAR integrity metadata into the resulting Hermes.exe. Without this metadata, the built resources/app.asar file is only ~176 bytes (empty/broken) instead of the expected ~42MB. Electron cannot find the app entry point, resulting in:

• 「此应用无法在你的电脑上运行」(This app can't run on your computer) — [Bug]: This app can't run on your computer (此应用无法在你的电脑上运行) #69179
• Electron help text shown instead of the app — [Windows] Desktop app broken: electron-builder produces invalid Hermes.exe (shows Electron help text) #70825

Fix

Remove signAndEditExecutable: false entirely. The default value for this option in electron-builder is true, which means ASAR integrity metadata will be properly embedded. If code signing is unavailable, forceCodeSigning: false provides the safety valve — the build still embeds integrity metadata and produces a working binary, just without a digital signature.

This is a minimal, targeted fix.

Files changed

• apps/desktop/package.json — Removed signAndEditExecutable: false from the win build config

Fixes #69179
Fixes #70825

[teknium1]

Closing — #69179 is fixed on main via #71119 + #71218, and the root cause was verified against reporter data: a raw un-staged/corrupt Electron binary shipped by the self-update rebuild (207,462,400-byte stock exe), not missing ASAR integrity metadata. signAndEditExecutable: false is deliberate in our local-rebuild path — end-user machines have no signing infrastructure, and enabling exe editing there introduces rcedit rewrite failures (one of the corruption sources the new gate defends against). The gate now verifies the rebuilt exe before it replaces anything and rolls back on failure. If #70825 (Electron help text) still reproduces on a build containing #71119, please re-report there with the new integrity-gate output. Thanks @webtecnica for digging into the builder config.