There is a bit of good news, though: it seems that sometimes if I tell GitHub to retry the workflow, it succeeds.
Topic:
Code Signing
SubTopic:
Notarization