Skip Developer ID checks when notarization is disabled

[afarchy]

Summary

• skip Developer ID identity discovery and validation when macOS notarization is disabled
• preserve Developer ID Application and Installer requirements for notarized, Steam, PKG, and DMG exports
• rebuild the committed action bundle

Problem

A non-App Store macOS export with notarize: false still runs security find-identity and fails unless a Developer ID Application certificate is installed. This makes non-notarized development/debugging exports require credentials that are only used by the notarization path.

Reproduction: https://github.com/virtual-maker-net/buildalon-web/actions/runs/33467584973

Validation

• npm ci
• npx tsc --noEmit
• npm run bundle

[StephenHodgson]

Changes LGTM, but still needs a rebuild and version bump