Build local release artifacts and prepare Compose deployment [skip ci]

launcher/src-tauri/src/secrets.rs

@@ -35,7 +35,9 @@ const SERVICE: &str = "net.scopenet.launcher";
 
 fn load_or_create_key(dir: &std::path::Path) -> [u8; 32] {
     let b64 = base64::engine::general_purpose::STANDARD;
-    #[cfg(any(windows, target_os = "macos"))]
+    // Unit tests use their own temporary key file; the OS keychain can prompt
+    // for desktop access and block unattended checks.
+    #[cfg(all(not(test), any(windows, target_os = "macos")))]
     {
         if let Ok(entry) = keyring::Entry::new(SERVICE, "secrets-key") {
             if let Ok(existing) = entry.get_password() {