Add GitHub Actions workflow for automated builds

- Windows and Linux builds on tag push
- Optional VirusTotal submission (requires VIRUSTOTAL_API_KEY secret)
- Automatic upload to GitHub Release
- Manual workflow_dispatch trigger option

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: steveseguin

.github/workflows/build-release.yml

@@ -0,0 +1,128 @@
+name: Build and Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version tag (e.g., v2.23.1)'
+        required: true
+
+jobs:
+  build-windows:
+    runs-on: windows-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+          ssh-key: ${{ secrets.SUBMODULE_SSH_KEY }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+        env:
+          # Skip native module build if submodule not available
+          WINDOW_AUDIO_CAPTURE_SKIP: ${{ secrets.SUBMODULE_SSH_KEY == '' && '1' || '0' }}
+
+      - name: Build Windows
+        run: npm run build:win32
+
+      - name: Get version
+        id: version
+        shell: bash
+        run: |
+          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
+            echo "tag=${{ github.event.inputs.version }}" >> $GITHUB_OUTPUT
+          else
+            echo "tag=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Upload to Release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@v1
+        with:
+          files: |
+            dist/elecap_win_*_portable.zip
+            dist/elecap_win_*_installer.zip
+            dist/elecap-*.exe
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload artifacts (for workflow_dispatch)
+        if: github.event_name == 'workflow_dispatch'
+        uses: actions/upload-artifact@v4
+        with:
+          name: windows-builds
+          path: |
+            dist/elecap_win_*_portable.zip
+            dist/elecap_win_*_installer.zip
+            dist/elecap-*.exe
+
+      - name: Submit to VirusTotal
+        if: secrets.VIRUSTOTAL_API_KEY != ''
+        shell: bash
+        run: |
+          # Find the portable exe
+          EXE_FILE=$(ls dist/elecap.exe 2>/dev/null || echo "")
+          if [ -n "$EXE_FILE" ]; then
+            echo "Submitting $EXE_FILE to VirusTotal..."
+            RESPONSE=$(curl -s --request POST \
+              --url 'https://www.virustotal.com/api/v3/files' \
+              --header "x-apikey: ${{ secrets.VIRUSTOTAL_API_KEY }}" \
+              --form "file=@$EXE_FILE")
+            ANALYSIS_ID=$(echo "$RESPONSE" | jq -r '.data.id // empty')
+            if [ -n "$ANALYSIS_ID" ]; then
+              echo "VirusTotal analysis submitted: https://www.virustotal.com/gui/file-analysis/$ANALYSIS_ID"
+            else
+              echo "VirusTotal submission response: $RESPONSE"
+            fi
+          fi
+        env:
+          VIRUSTOTAL_API_KEY: ${{ secrets.VIRUSTOTAL_API_KEY }}
+
+  build-linux:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+        env:
+          WINDOW_AUDIO_CAPTURE_SKIP: '1'
+
+      - name: Build Linux
+        run: npm run build:linux
+
+      - name: Upload to Release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@v1
+        with:
+          files: |
+            dist/*.AppImage
+            dist/*.deb
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload artifacts (for workflow_dispatch)
+        if: github.event_name == 'workflow_dispatch'
+        uses: actions/upload-artifact@v4
+        with:
+          name: linux-builds
+          path: |
+            dist/*.AppImage
+            dist/*.deb