Add msi, gpo, new CI and runtime/sandbox hardening

* Add msi installer via Wixtoolset
* Add PowerShell Makefile
* [MM-18135] merge lint and test step, use -quiet, clarify changing debugging port
* [MM-18135] use no sandbox, separate linting, circle 2.1
* [MM-18137] Add MSI installer job
* [MM-18137] Add windows signing
* [MM-18152] Desktop notifications (#1040)
* [MM-18345] use non-dangerous wix version
* [MM-18348] add code signing to windows build (#1044)
* [MM-18348] fix review comments
* [MM-18851] runtime/sandbox hardening (#1042)
* [MM-18906] remove GPU acceleration option from GPO settings (#1047)
* Other minor refinements

electron-builder.json

@@ -20,7 +20,9 @@
   "protocols": [
     {
       "name": "Mattermost",
-      "schemes": ["mattermost"]
+      "schemes": [
+        "mattermost"
+      ]
     }
   ],
   "deb": {
@@ -64,7 +66,9 @@
           "NOTICE.txt"
         ]
       }
-    ]
+    ],
+    "hardenedRuntime": true,
+    "entitlements": "./resources/osx/entitlements.mac.inherit.plist"
   },
   "dmg": {
     "background": "resources/osx/DMG_BG.png",
@@ -93,3 +97,4 @@
     "artifactName": "${name}-setup-${version}-win.${ext}"
   }
 }
+