[BStarmerSmith]

Summary

• Adds nfpm.yaml to build .deb packages (amd64 + arm64) for Debian/Ubuntu
• Adds publish-apt job to the release workflow — triggers after build-exec, publishes to conduktor/apt via reprepro
• Adds Homebrew and apt install instructions to the README

How it works

On each GitHub release:

1. build-exec uploads Linux binaries as release assets (existing)
2. publish-apt downloads them, builds .deb files with nfpm, checks out conduktor/apt, runs reprepro includedeb stable for each arch, then commits and pushes

Users install via:

curl -fsSL https://conduktor.github.io/apt/gpg.key | sudo gpg --dearmor -o /etc/apt/keyrings/conduktor.gpg
echo "deb [signed-by=/etc/apt/keyrings/conduktor.gpg] https://conduktor.github.io/apt stable main" | sudo tee /etc/apt/sources.list.d/conduktor.list
sudo apt update
sudo apt install conduktor-ctl

Prerequisites (already done)

• conduktor/apt repo created and initialized with reprepro structure
• GitHub Pages enabled on conduktor/apt at https://conduktor.github.io/apt
• APT_GPG_PRIVATE_KEY secret added to conduktor/ctl

Test plan

• Merge to main
• Publish a release tag
• Confirm publish-apt job passes in Actions
• Confirm conduktor/apt has a new commit with the .deb packages
• Test install on a clean Ubuntu container

🤖 Generated with Claude Code