split bundle config into tauri.{windows,linux,macos}.conf.json so each platform only carries its own targets; gen-icon emits icon.icns; macos is ad-hoc signed since arm64 refuses unsigned downloads
