fix(app): revert to digicert signing

[sfoster1]

This reverts #18450 and #18479 to revert to digicert signing for our windows builds.

The digicert certificate has the Common Name "Opentrons Labworks Inc." and the ATS cert has the common name "OPENTRONS LABWORKS INC.". These were both determined automatically by the CA from our identity submissions, as is apparently required in the code signing cert baseline requirements. Why are they different? A mystery for the ages.

In either case, electron-updater requires that if you specify a publisherName in your app-update.yml (which we do specifically on windows, since it is generated from our electron-builder config and on windows we set it because nsis packager wants it for doing signing in the first place) then the autoupdate package that will be installed must have a CSC CN exactly matching an entry in publisherName or the update will fail. Therefore updates in between <=8.4.1 and >=8.5.0 would fail if we switched to ATS.

Instead, we'll switch back to digicert for now; we'll build the new CN into our publisher names; and then whenever we're confident enough people are on >=8.5.0 and therefore have the new publisher names, we'll switch over again (we can't switch immediately because we don't do incremental updates, just full overwrites, so the intermediate update state would go away).

This is upsetting.

Testing

• the signing has to work again, which is never guaranteed given the shonky state of dco integration
• we should make sure we can update from 8.4.1 to this by making sure the CN of the digital signature on the build from this pr is exactly Opentrons Labworks Inc. (and updating to it in the resulting alpha)
• we should make sure we can update from this to something signed with the new cert (by mucking around with the latest-alpha or something? or just checking that the app-update.yml in the app's install directory has both names)

Supercedes #18785 for build branch name reasons.

[y3rsh]

https://builds.opentrons.com/app/Opentrons-v8.5.0-alpha.7-win-b58315-rqa-4324-worst-day-of-my-life-app-build-both-as-release.exe

installs and downgrades to 8.4.1 with no issues.