chore(ci): build desktop from the unsigned CLI artifact (#53313)

.github/workflows/publish.yml

@@ -348,10 +348,11 @@ jobs:
           if-no-files-found: error
 
   build-electron:
+    # Desktop packaging re-signs the bundled CLI on macOS and Windows, so it starts from the unsigned build.
     needs:
       - version
-      - sign-cli-windows
-    if: github.repository == 'anomalyco/opencode' && (github.ref_name != 'v2' || needs.version.outputs.release != '')
+      - build-cli
+    if: github.repository == 'anomalyco/opencode' && ((github.ref_name == 'v2' && needs.version.outputs.release != '') || github.ref_name == 'beta')
     continue-on-error: false
     env:
       AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
@@ -391,7 +392,7 @@ jobs:
 
       - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
         with:
-          name: opencode-preview-cli
+          name: opencode-preview-cli-unsigned
           path: packages/cli/dist
 
       - uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0