ci: update zsp to v0.4.5

[devin-ai-integration]

Summary

Bumps the pinned zsp (Zapstore publisher) version used in the Publish to Zapstore workflow from v0.3.3 to v0.4.5 (latest release as of 2026-03-31).

Still installed via go install github.com/zapstore/zsp@v0.4.5, which relies on Go's module checksum database (sum.golang.org) for hash verification — same pinning style as before.

Release notes between v0.3.3 → v0.4.5 include: find relays from community, "agent friendly CLI", improved F-Droid client, panic fix, terms-of-service printing, default h-tag to community pubkey, wizard fixes, skip-cert-linking flag, default-to-new-NIP-format, pre-release filtering, etc. See releases page.

Review & Testing Checklist for Human

• Confirm the existing zsp publish -y --skip-preview --commit "$COMMIT_SHA" zapstore.yaml invocation (lines 52–56) is still valid in v0.4.5 — the "Agent friendly CLI" changelog entry suggests flag/UX changes may have landed between v0.3.3 and v0.4.5.
• Confirm the existing zapstore.yaml schema is still compatible with v0.4.5 (notably the "default to new NIP format" change in v0.3.4).
• Since this workflow only triggers after a successful Release run, it will not be exercised by CI on this PR. Plan to monitor the next release publish to Zapstore, or dispatch a test run manually.

Notes

• Only the version string changed; no other workflow logic was modified.
• If stricter hash pinning is desired (e.g. pinning to the commit SHA ef7af27054404545491c10ba94ded866e0cc8f0b that v0.4.5 resolves to), let me know and I can switch the pin format.

Link to Devin session: https://app.devin.ai/sessions/8db36c5cef394bf4a189d32c1be6711e

---

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[cloudflare-workers-and-pages]

Deploying maple with    Cloudflare Pages

Latest commit:	e1be52e
Status:	✅  Deploy successful!
Preview URL:	https://4f716714.maple-ca8.pages.dev
Branch Preview URL:	https://devin-1776364646-update-zsp.maple-ca8.pages.dev

View logs

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 1 additional finding.