fix(release): wrap goreleaser before-hooks in sh -c

The v1.0.0 release run (workflow #25778329702) failed at the very
first hook with:

    error=exec: "cd": executable file not found in $PATH
    cmd=cd

Root cause: goreleaser's `before.hooks` runs each entry via Go's
exec.Command — no shell interpretation. `cd go && go mod download`
gets parsed as binary="cd", args=["go", " && ", "go", "mod", "download"],
and exec can't find a `cd` binary.

Fix: wrap each hook in `sh -c "…"` so the working-directory change
and `&&` chain run inside a real shell.

After this lands, retag v1.0.0 to re-fire the release workflow.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: aksOps

.goreleaser.yml

@@ -17,9 +17,11 @@ env:
 before:
   hooks:
     # Sanity gate. Failing here aborts the release before any binary
-    # leaves the runner.
-    - cd go && go mod download
-    - cd go && go test ./... -count=1
+    # leaves the runner. Goreleaser runs each hook via exec.Command
+    # (no shell), so bare `cd go && …` fails — `cd` isn't an executable
+    # in $PATH. Wrap in `sh -c` to get a working-directory side-effect.
+    - sh -c "cd go && go mod download"
+    - sh -c "cd go && go test ./... -count=1"
 
 builds:
   - id: codeiq