🐛 fix(ci): 修复跨 Runner 驱动版本误判

使用构建阶段 SHA 绑定 provenance 校验驱动发布资产。

保留原生二进制元数据和 legacy fallback 校验，并固定发布任务 Go 环境。

Fixes #622

.github/workflows/dev-build.yml

@@ -1113,6 +1113,11 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v5
 
+      - name: Setup Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: 'go.mod'
+
       - name: Download All Artifacts
         uses: actions/download-artifact@v7
         with:

.github/workflows/release.yml

@@ -1078,6 +1078,11 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v5
 
+      - name: Setup Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: 'go.mod'
+
       - name: Download All Artifacts
         uses: actions/download-artifact@v7
         with: