Show the code signing policy and privacy statement SignPath asks for

[ifoknr]

SignPath Foundation's terms (https://signpath.org/terms) ask for:

• the term "Code signing policy" on the project's home page and on its download/release pages;
• a privacy policy, or the sentence "This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it".

Changes:

• README.md and README.ar.md: a "Code signing policy" line linking CODE_SIGNING.md and the privacy sentence, in the Download section.
• CODE_SIGNING.md: the privacy section uses SignPath's wording. It also says the app has no telemetry and no update check; I checked that the code makes no network calls.
• release.yml: every release body now links CODE_SIGNING.md.

No code changes.

---

Generated by Claude Code