ci(release): migrate Discrawl to shared pipeline

[steipete]

Summary

• make release-unified.yml the only official Discrawl release path through openclaw/release-workflows@v1
• preserve checksums.txt, all six thin platform archive names, the four established archive members, org.openclaw.discrawl, SSH-signed tags, and the existing Homebrew token/tap
• remove the duplicate post-publish verifier/handoff workflow and obsolete GoReleaser local-signing hook
• add the shared Makefile contract and make local publishing entry points fail with the exact unified workflow command

Asset diff

No published asset disappears or is renamed.

Unchanged:

• checksums.txt
• discrawl_VERSION_darwin_amd64.tar.gz
• discrawl_VERSION_darwin_arm64.tar.gz
• discrawl_VERSION_linux_amd64.tar.gz
• discrawl_VERSION_linux_arm64.tar.gz
• discrawl_VERSION_windows_amd64.zip
• discrawl_VERSION_windows_arm64.zip
• CHANGELOG.md, LICENSE, README.md, and the Discrawl executable inside each archive

Additive verifier controls:

• ASSET-INVENTORY.json
• SIGNING-MANIFEST.json
• RELEASE-NOTES.md

Proof

• make check — tidy, gofumpt, golangci-lint, vet, staticcheck, gosec, govulncheck, 85.1% filtered coverage, race tests, state-independent CLI smoke, and GoReleaser snapshot all green
• actionlint .github/workflows/*.yml
• goreleaser check
• go test ./scripts
• snapshot produced all six expected archive names; Linux and Windows archives contain exactly the four established members
• local release script exits nonzero and prints gh workflow run release-unified.yml --repo openclaw/discrawl -f version=X.Y.Z
• autoreview: accepted fail-fast verifier and explicit SSH tag documentation fixes; rejected environment/SHA-pin policy changes because the requested fleet contract intentionally mirrors Slacrawl's direct secret mapping and floating @v1; rejected a stale-input finding after exact remote proof that v1 peels to b480dcb48113e91b500ad473798ba5ce3619ebf7 and defines every configured input

[clawsweeper]

ClawSweeper status: review started.

I am starting a fresh review of this pull request: ci(release): migrate Discrawl to shared pipeline This is item 1/1 in the current shard. Shard 0/1.

This placeholder means the worker is alive and reading the current context. I will edit this same comment with the actual review when the claws are done clicking.

Crustacean status: shell secured, claws on keyboard, evidence pebbles being sorted.