ci: Fix submit workflow (#35)

Co-authored-by: Aaron <aaronklinker1@gmail.com>

Author: Semro

.github/workflows/submit.yml

@@ -55,6 +55,7 @@ jobs:
         with:
           path: .output/*.zip
           if-no-files-found: error
+          include-hidden-files: true
 
       - name: Submit
         run: |
@@ -89,3 +90,8 @@ jobs:
       - name: Release
         if: ${{ !inputs.dryRun }}
         run: pnpx changelogen@latest gh release ${{ steps.version.outputs.newVersion }} --token ${{ github.token }}
+
+      # Don't upload sources zip - it can contain .env files, which may include secrets
+      - name: Upload ZIPs
+        if: ${{ !inputs.dryRun }}
+        run: gh release upload ${{ steps.version.outputs.newVersion }} .output/*-chrome.zip .output/*-firefox.zip