更新

wechat_rpa/build_installer.ps1

@@ -92,6 +92,11 @@ if (-not $installer) {
     throw "Installer compilation completed but output file was not found"
 }
 
+# 有证书时给安装包签名（无证书自动跳过）。用户下载到的就是这个文件，
+# SmartScreen 的"有风险"提示主要看它有没有签名与信誉。
+& (Join-Path $projectRoot "sign_artifact.ps1") -Path $installer.FullName
+if ($LASTEXITCODE -ne 0) { throw "Installer code signing step failed" }
+
 $hash = (Get-FileHash -LiteralPath $installer.FullName -Algorithm SHA256).Hash
 Write-Output ("Installer: " + $installer.FullName)
 Write-Output ("SHA256: " + $hash)