general: improving build process, start repeated code extraction

.env.example

@@ -0,0 +1,28 @@
+# Notarization & Code Signing (Required for build_dmg)
+# =====================================================
+
+# Developer ID Application certificate identity
+# Format: "Developer ID Application: Your Name (TEAM_ID)"
+# Find in Keychain Access or run: security find-identity -v -p codesigning
+DEVELOPER_ID_APPLICATION="Developer ID Application: Your Name (XXXXXXXXXX)"
+
+# Apple Team ID
+# Find at: https://developer.apple.com/account#MembershipDetailsCard
+APPLE_TEAM_ID="XXXXXXXXXX"
+
+# Notarization keychain profile name
+# This references credentials stored securely in your macOS Keychain
+# One-time setup (run this command once):
+#   xcrun notarytool store-credentials "notary-profile" \
+#     --apple-id "your@email.com" \
+#     --team-id "XXXXXXXXXX"
+# You'll be prompted for an app-specific password from:
+#   https://appleid.apple.com/account/manage
+NOTARY_KEYCHAIN_PROFILE="notary-profile"
+
+# AWS S3 Upload (Optional)
+# =========================
+AWS_ACCESS_KEY_ID="your-access-key"
+AWS_SECRET_ACCESS_KEY="your-secret-key"
+AWS_BUCKET_NAME="your-bucket-name"
+AWS_REGION="us-east-1"