Workflow is currently breaking because there are multiple versions of signtool
installed on runners. We face a challenge where we either hardcode this to a
specific version on the runner or always choose the latest version; this change
does the latter.
- The certificate pfx file is now read from WINDOWS_CERT_PFX
- The password to decode the pfx is in WINDOWS_CERT_PASSWORD
- Quit reading from desktop-secrets repo
- Switch osslsigncode to take in pfx instead of individual certs
- 🔥 obsolete setup scripts