getsentry/spotlight electron-builder 26 migration: 4-PR arc (#1334-#1337)

electron-builder notarizes internally via its afterSign hook using @electron/notarize; it never calls scripts/notarize.cjs. Don't assume this file is the active notarization path when debugging Apple notarization failures — check build.yml's Apple key decode/export steps and electron-builder's config instead.