CI: fix Arch-registry publish (use makepkg --packagelist; !strip for cross-arch repack)

The runner's PKGEXT is .pkg.tar.xz, so the .zst glob never matched;
--packagelist yields the exact filename, and options=('!strip') lets the
foreign-arch binary be packaged on the aarch64 host without stripping.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GLUwWE2KmFPzhKaf67tWbx

.gitea/workflows/release.yml

@@ -138,12 +138,18 @@ jobs:
       # one host. Consumers: see the infrastructure README.
       - name: Publish to the Arch package registry
         run: |
+          set -euo pipefail
           cd aur
+          # Build both arches here (repackaging the released binaries) and
+          # push each to the instance Arch registry. Use --packagelist for
+          # the exact filename (honours the runner's PKGEXT/PKGDEST) rather
+          # than globbing, and !strip (in the PKGBUILD) so packaging the
+          # foreign-arch binary on this host does not try to strip it.
           for carch in aarch64 x86_64; do
-            rm -f ./*.pkg.tar.zst
+            pkgfile=$(CARCH="$carch" makepkg --packagelist | tail -1)
-            CARCH=$carch makepkg -f --nodeps
+            CARCH="$carch" makepkg -f --nodeps --noconfirm --skipinteg
-            curl --fail --user "${{ gitea.actor }}:${{ secrets.GITHUB_TOKEN }}" \
+            curl --fail-with-body --user "${{ gitea.actor }}:${{ secrets.GITHUB_TOKEN }}" \
-              --upload-file ./*-$carch.pkg.tar.zst \
+              --upload-file "$pkgfile" \
               "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/arch/uhhm"
           done
 

aur/PKGBUILD

@@ -4,6 +4,7 @@ pkgver=0.2.5
 pkgrel=1
 pkgdesc="Web chat over NATS subjects with Kanidm SSO (Leptos SSR)"
 arch=('x86_64' 'aarch64')
+options=('!strip')
 url="https://project.uhhm.no/bl/cnats"
 license=('MIT')
 depends=('glibc' 'gcc-libs')