I had a similar problem – which I opened sourced here; http://replay.software/bump. Bump basically automates all of the Sparkle signing and appcast creation using GitHub Actions, and then pushes the binary & changelog to AWS automatically with Terraform.