build: unify preinstalled skills bundling across dev/package/release and harden SignPath validation (#524)

.github/workflows/package-win-manual.yml

@@ -52,7 +52,7 @@ jobs:
       - name: Build Windows package (no publish)
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: pnpm run build:vite && pnpm exec zx scripts/bundle-openclaw.mjs && pnpm exec electron-builder --win --publish never
+        run: pnpm run package:win
 
       - name: Upload Windows Installer (x64)
         uses: actions/upload-artifact@v4