fix(build): restore static native RE2 for full artifacts

[M09Ic]

Summary

• upgrade the chainreactors/go-re2 replacement to the revision with static native RE2 support
• build every aiscan-full release target and GoReleaser artifact with re2_cgo re2_static
• exercise the Windows native packages and full CLI with the same release tags
• give standard Windows artifacts an explicit .exe suffix and verify both Windows outputs exist
• add an embedded nginx fingerprint smoke test to catch RE2/resource regressions

Why

Full release artifacts should use the native RE2 backend without requiring a shared RE2 library at runtime. The CI checks keep the release tags aligned with the tested Windows build and make Windows artifact names deterministic.

Verification

• go mod tidy -diff
• go test -count=1 ./core/resources
• go test -count=1 ./cmd/aiscan
• CGO_ENABLED=1 go test -count=1 -tags "re2_cgo re2_static" ./agent/... ./pkg/runner/... ./pkg/web/...
• CGO_ENABLED=1 go test -count=1 -tags "forceposix emptytemplates noembed osusergo netgo full sqlite re2_cgo re2_static" ./cmd/aiscan