17b5119d40
distribute.yml: - New 'chocolatey' job: updates nuspec version + install script SHA256, packs .nupkg, pushes to chocolatey.org. Gated by CHOCO_SKIP_WACATAC env var so it can be disabled while the Microsoft false-positive is still active (set CHOCO_SKIP_WACATAC=true on the repo, flip to empty after Microsoft clears the detection). - New 'winget' job: forks microsoft/winget-pkgs (auto-creates fork if needed), generates the three manifest files (version/locale/installer) in the winget-pkgs v1.6.0 format, opens a PR. Both jobs use the Windows setup.exe as the installer source. Both jobs skip gracefully with a warning if their respective GitHub secrets aren't set. packaging/chocolatey/tools/chocolateyInstall.ps1: - Rewritten to use the NSIS installer (.exe) instead of the old .zip format (the v5.9.x release ships an NSIS .exe setup) - Uses $env:ChocolateyPackageVersion so the workflow can substitute the version at pack time - checksum64 is '__CHECKSUM_PLACEHOLDER__' which the workflow replaces with the computed SHA256 Required GitHub secrets (all added): CHOCO_API_KEY - Chocolatey API key WINGET_TOKEN - GitHub PAT with public_repo scope