make gatekeeper assessment optional

scripts/tests/test-custom-release-macos-runner.bats

@@ -156,7 +156,7 @@ setup() {
 	[ "$status" -eq 0 ]
 }
 
-@test "custom release validates darwin binaries before publishing" {
+@test "custom release validates signed darwin binaries before publishing" {
 	run rg -n 'modernc-sqlite' "$RELEASE_SCRIPT"
 	[ "$status" -eq 0 ]
 
@@ -166,6 +166,15 @@ setup() {
 	run rg -n 'TeamIdentifier=NG5W75WE8U|TeamIdentifier.*NG5W75WE8U' "$RELEASE_SCRIPT"
 	[ "$status" -eq 0 ]
 
+	run rg -n 'CUSTOM_RELEASE_REQUIRE_GATEKEEPER_ASSESSMENT: "0"' "$WORKFLOW"
+	[ "$status" -eq 0 ]
+
+	run rg -n 'require_gatekeeper_assessment="\$\{CUSTOM_RELEASE_REQUIRE_GATEKEEPER_ASSESSMENT:-0\}"' "$RELEASE_SCRIPT"
+	[ "$status" -eq 0 ]
+
+	run rg -n 'if \[\[ "\$require_gatekeeper_assessment" == "1" \]\]; then' "$RELEASE_SCRIPT"
+	[ "$status" -eq 0 ]
+
 	run rg -n 'spctl -a -vv --type execute' "$RELEASE_SCRIPT"
 	[ "$status" -eq 0 ]
 }