chore(actions): added a toolchain for go1.24.12

[aricart]

Problem

Release workflow failing with go: updates to go.sum needed, disabled by -mod=readonly

Root Cause

go vet on linux needs transitive dependency checksums that macOS go mod tidy doesn't add:

• golang.org/x/net
• golang.org/x/term
• golang.org/x/text

These are transitive deps of golang.org/x/crypto and golang.org/x/sys needed only during analysis on linux.

Fixes Applied

1. pushes.yaml

• Added GOFLAGS: "-mod=mod" to integrity checks (allows go.sum updates)
• Added install-go: false to staticcheck (prevents Go version override)

2. release.yaml

• Removed integrity checks (go vet, retracted check) - redundant since pushes.yaml runs them
• Uses go-version-file: "go.mod"

3. test-release.yaml (new)

• Manual workflow_dispatch for testing releases with --snapshot --skip=publish

4. .goreleaser.yml

• Added version: 2 (required for goreleaser v2)
• Changed format: zip → formats: [zip]
• Changed snapshot.name_template → snapshot.version_template

5. go.mod

• Added toolchain go1.24.12

[coveralls]

Pull Request Test Coverage Report for Build 21303478473

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 80.347%

---

Totals
Change from base Build 21298238181:	0.0%
Covered Lines:	417
Relevant Lines:	519

---

💛 - Coveralls

[aricart]

@philpennock sorry - but this is the PR that works.

The main issue is that go mod tidy doesn't require some deps on OS X, so anytime the release action tried to do go vet or go list, et all - it fails because of the go mod being read-only.

I don't know if this acceptable - in the end I think we should have the check for retracted to be an action that auto-runs in the repo daily as I think that this is a valuable feature.

[philpennock]

I like the test-release approach.