[codex] Add Homebrew Cask publishing for macOS

[junjunjunbong]

Summary

• add a DMG-backed Homebrew Cask template for the macOS desktop app
• publish the rendered Cask to tinyhumansai/homebrew-openhuman after production releases
• update the README to use the cask install command with a signed DMG fallback

Why

The README currently points users at a Homebrew tap that resolves to tinyhumansai/homebrew-openhuman, but that tap is not published today. Once the tap repo is provisioned, release-production now has a concrete Cask publishing path that matches the actual macOS release assets.

Fixes #2727.

Operational note

The release job requires HOMEBREW_TAP_TOKEN with contents:write access to tinyhumansai/homebrew-openhuman, and that tap repository must exist before the job can publish Casks.

Validation

• bash -n scripts/release/update-homebrew-cask.sh
• ruby -c packages/homebrew-cask/openhuman.rb
• ruby -e 'require "yaml"; YAML.load_file(".github/workflows/release-production.yml")'
• git diff --check
• gh repo view tinyhumansai/homebrew-openhuman returns: Could not resolve to a Repository

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 98604d15-46eb-487c-b3ee-13f4507f00f7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}