f53dfa1c4c
Four defects from the rc.1 dress rehearsal: - Dockerfile pinned golang:1.26-alpine3.23 at a 1.26.3 digest while go.mod requires 1.26.4; golang images set GOTOOLCHAIN=local, so the build hard-fails. Pin 1.26.4-alpine3.23 explicitly. - changelog.disable swallowed --release-notes (the flag is consumed by the changelog pipe), publishing empty release bodies. Re-enable. - Remove the Gitea-side GitHub relay step: redundant with .github/workflows/mirror-release.yml, which runs on GitHub Actions with the built-in token and copies the canonical Gitea assets. - mirror-release.yml: jq '.body // empty' treats "" as truthy so the notes fallback never fired; use select(). Mark rc tags --prerelease.