fix(ci): gate macos verify behind release upload flag

[web3dev1337]

Summary

• skip macOS signed/notarized verification when packaged macOS release uploads are disabled
• keep the macOS smoke build and artifact upload behavior unchanged
• align tag workflow behavior with the existing temporary no-macOS-downloads release policy

Root Cause

• the tag workflow always ran verify-macos-bundle.sh even with MACOS_RELEASE_UPLOAD_ENABLED=false
• that made v0.1.17 fail on a platform we are not currently shipping as packaged release assets

Verification

• git diff --check