ci: stage electron app dir before packaging

The v0.1.1 release failed on all three platforms with
  "<file> must be under apps/electron/"
because electron-builder follows the workspace symlinks under
node_modules and gets realpaths outside the app dir.

scripts/stage-electron.mjs already handles this locally by physically
copying the prod dependency closure into apps/electron/node_modules,
but the workflow never invoked it. Add the step before each Package
job and bump to 0.1.2.

Author: bfaure

.github/workflows/release.yml

@@ -60,6 +60,9 @@ jobs:
         working-directory: apps/electron
         run: npx tsc
 
+      - name: Stage electron app dir
+        run: node scripts/stage-electron.mjs
+
       - name: Package (macOS)
         if: matrix.os == 'macos-latest'
         run: npx electron-builder --mac --publish never

apps/backend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sniff/backend",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": true,
   "type": "module",
   "main": "./dist/server.js",

apps/electron/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sniff/electron",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": true,
   "description": "Sniff - LLM-integrated interception proxy",
   "homepage": "https://github.com/bfaure/sniff",

apps/renderer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sniff/renderer",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": true,
   "type": "module",
   "scripts": {

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "sniff",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": true,
   "description": "LLM-integrated interception proxy for paired pentesting",
   "workspaces": [

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sniff/shared",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": true,
   "type": "module",
   "main": "./dist/index.js",