fix: stabilize 4.0.0 release pipeline

.gitattributes

@@ -0,0 +1,2 @@
+WeFlow export-ignore
+WxKey-CC export-ignore

.github/workflows/release.yml

@@ -287,8 +287,6 @@ jobs:
       - build-windows
       - build-macos
       - generate-release-body
-    env:
-      GH_TOKEN: ${{ secrets.GH_TOKEN }}
     steps:
       - name: Download release metadata
         uses: actions/download-artifact@v4
@@ -398,6 +396,7 @@ jobs:
       - name: Create or update GitHub Release
         uses: softprops/action-gh-release@v2.5.0
         with:
+          token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ needs.prepare-meta.outputs.tag }}
           name: CipherTalk v${{ needs.prepare-meta.outputs.version }}
           body_path: release/release-body.md

scripts/run-electron-builder.cjs

@@ -14,7 +14,7 @@ const configPath = path.join(__dirname, 'electron-builder.config.cjs')
 
 const result = spawnSync(
   process.execPath,
-  [cliPath, `--${target}`, '--config', configPath],
+  [cliPath, `--${target}`, '--publish', 'never', '--config', configPath],
   {
     stdio: 'inherit',
     env: {