feat: add SignTool to the Inno Setup script

[rivafarabi]

• Add SignTool by adding sign_tool under inno_bundle in the pubspec.yaml file
• If not specified/empty, the SignTool won't be added to the script, otherwise the script will become invalid.

[hahouari]

Your PR is much appreciated ❤️,
Been reading more about sign tools for Windows to understand how to better integrate this attribute before another release, I'm curious here where you wrote "Specifies the name and parameters of the Sign Tool", can you elaborate more with some values you would give to sign_tool attribute so I can better understand about the parameters part of the description.

Thanks again!

[rivafarabi]

Sure. To summaries, in Inno Setup's Configure Sign Tools configuration, user can assign a named variable with the command line and parameters as its value.

Here is the sample of the "SampleCodeSign" that run signtool.exe sign with parameters /tr {TIMESTAMP_URL} /td sha256 /fd sha256 /a $p $f

In pubspec.yaml, user can use the named variable or the complete command like below:

# sign_tool: SampleCodeSign
# or
# sign_tool: "signtool.exe sign /tr http://timestamp.digicert.com /td sha256 /fd sha256 /a $p $f"

I've just added the sign_tool attribute sample in the example app's pubspec.yaml with the complete command as

[hahouari]

Thanks for the thorough explanation, correct me if I'm wrong, according to inno setup docs and my own testing:

This works ✅ if you added SampleCodeSign to the Sign Tools list in the UI.

sign_tool: SampleCodeSign

This doesn't work ❌

sign_tool: "signtool.exe sign /tr http://timestamp.digicert.com /td sha256 /fd sha256 /a $p $f"

Inno cannot contain the full signtool.exe sign ... command in its .iss file,

I think to overcome this is a bit more complicated, something like this should be implemented:

sign_tool:
  command: "signtool.exe sign /tr http://timestamp.digicert.com /td sha256 /fd sha256 /a $p $f"

This way the command is appended to the compiler as

iscc /SMyCodeSign="signtool.exe sign ..." "/path/to/my_script.iss"

then the .iss file will have this

SignTool=MyCodeSign

If you have the capacity to implement this it would be awesome, otherwise, your code is great as it is rn, I can merge your PR and do these changes myself later. let me know.

[hahouari]

This added line results to the following when I try to run dart run inno_bundle:build

[hahouari]

I'm merging this PR, I will fine tune this feature a bit to make clear separation between sign-tool command and sign-tool name.
This will land in version 0.7.0, along with Inno Setup version 6.3.3 support.

If you have more thoughts to add later, let me know, cheers 👍 .