fix(aur): hash all six pdfapps-bin sources instead of SKIP

[nelsonduarte]

Summary

AUR user BluePeril reported that `updpkgsums` had to be run manually every time the pdfapps-bin PKGBUILD updates, because five of the six sources used `sha256sums = SKIP`. The auxiliary sources (LICENSE, .desktop, .metainfo.xml, icon, svg) are pinned to the release tag and therefore immutable, but having real hashes makes `updpkgsums` a no-op and matches AUR conventions for binary packages.

Changes

• `aur/pdfapps-bin/PKGBUILD`: bump pkgver to 1.13.10 and replace five `SKIP` entries with actual sha256 hashes computed against the v1.13.10 tag.
• `aur/pdfapps-bin/.SRCINFO`: regenerate to match (pkgver + six sha256sums lines).
• `.github/workflows/publish.yml`: rewrite the pdfapps-bin step to compute all six hashes on every release and replace the entire sha256sums block (Python in-place edit, both files). Future tags will keep the six-hash pattern automatically.

How the new workflow patches files

Switched from `sed`-based single-hash replacement to a Python heredoc that:

1. Reads the six hashes from environment variables computed via `curl | sha256sum`.
2. Rewrites `PKGBUILD`'s entire `sha256sums=(...)` array with a regex.
3. Walks `.SRCINFO` line by line and replaces the six `sha256sums = ...` lines in source order.

Test plan

• Wait for CI to pass on this PR
• Merge, then run `publish.yml` manually with `version=1.13.10` to push the updated PKGBUILD to AUR
• Verify on https://aur.archlinux.org/packages/pdfapps-bin that all six hashes are present
• Reply to BluePeril on the AUR comment thread confirming the fix
• Next release tag should keep the six-hash pattern automatically

🤖 Generated with Claude Code