Fix release job artifact handling

- Add permissions: contents: write for release creation
- Remove merge-multiple option that caused nested artifact issues
- Add prepare step to flatten binaries from nested artifact dirs
- Add fail_on_unmatched_files to catch missing binaries early

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: dqnamo

.github/workflows/build.yml

@@ -80,21 +80,27 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags/')
+    permissions:
+      contents: write  # Required for creating releases
 
     steps:
       - name: Download all artifacts
         uses: actions/download-artifact@v4
         with:
-          path: binaries
-          merge-multiple: true
+          path: artifacts
 
-      - name: List binaries
-        run: ls -la binaries/
+      - name: Prepare binaries
+        run: |
+          mkdir -p binaries
+          find artifacts -type f -name "hyperaide-sync-*" -exec cp {} binaries/ \;
+          echo "=== Binaries to release ==="
+          ls -la binaries/
 
       - name: Create Release
         uses: softprops/action-gh-release@v1
         with:
           files: binaries/*
           generate_release_notes: true
+          fail_on_unmatched_files: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}