The tauri-action doesn't properly handle Linux sig files in its artifact discovery. This adds manual steps to upload .sig files and updater bundles after each platform build, then generates latest.json in a final job that reads the signatures from the release assets.