Improved Windows binary signing

[rozyczko]

Investigate the ways to have additional signing removing the Microsoft Screen warnings.

[rozyczko]

The EV (Extended Validation) Code Cert, allowing compliance with Microsoft Defender SmartScreen filter is available from Digicert for ~$700/year. We currently pay $800 for a 3 year regular certificate.
The new cert would replace the existing certificate.
There is also a non-negligible conversion factor - the new signing would have to happen on a local machine, equipped with a special hardware device (USB key) shipped from Digicert.

[rozyczko]

Ordered the EV cert from Digicert - this most likely will require configuring a local GH runner, performing at least the signing process.

[rozyczko]

Currently installed locally on the development laptiop.
DST will prepare a special VM for this task within the next 2-3 months.
The VM will be located in the server room.
The next release (0.8.2) will be signed manually.

https://confluence.esss.lu.se/display/DAM/EV+Certificate+for+Windows