Prepare v0.4 release and open source docs

docs/RELEASE.md

@@ -0,0 +1,68 @@
+# Release Workflow
+
+Use this checklist when preparing a new public version.
+
+## Version Source
+
+The release version lives in one place:
+
+```sh
+scripts/release-version.sh
+```
+
+For a new app version, update `APP_VERSION` and reset or increment `BUILD_NUMBER`.
+For another upload of the same app version, leave `APP_VERSION` alone and increment
+`BUILD_NUMBER`.
+
+`RELEASE_VERSION` defaults to the app version without a trailing `.0`, so `0.4.0`
+produces release artifacts named with `v0.4`.
+
+## Required Checks
+
+Run these before tagging or uploading:
+
+```sh
+swift test
+swift scripts/verify-sample-pdf.swift
+swift scripts/verify-pdf-annotations.swift
+scripts/build-app.sh
+BUILD_APP=0 scripts/make-dmg.sh
+scripts/make-tiny-archives.sh
+scripts/verify-release-artifacts.sh
+```
+
+`scripts/make-tiny-archives.sh` builds per-architecture direct-download archives and
+fails if either archive is `>= 400,000` bytes.
+
+For signature changes, also run:
+
+```sh
+USE_TEMP_SIGNING_KEYCHAIN=1 scripts/verify-pdf-signatures.sh
+scripts/prepare-acrobat-qa.sh
+```
+
+Finish the manual reader checks in `docs/QA.md` before public distribution.
+
+## Direct Download
+
+The direct-download release artifacts are generated under `dist/`:
+
+- `I Hate PDFs.app`
+- `IHatePDFs-v<release>-macos.dmg`
+- `IHatePDFs-v<release>-macos-arm64.tar.xz`
+- `IHatePDFs-v<release>-macos-x86_64.tar.xz`
+
+`dist/` and root package/archive extensions are ignored so generated outputs do not
+pollute source control.
+
+## App Store
+
+Use `docs/APP_STORE.md` for signing identities, provisioning profile setup, and the
+upload package command. After building the App Store package, run:
+
+```sh
+REQUIRE_APP_STORE_PKG=1 scripts/verify-release-artifacts.sh
+```
+
+Do not change App Store entitlements unless a shipped feature requires the new
+capability.