Wire Forge-native release infrastructure

.forgejo/workflows/release.yml

@@ -10,6 +10,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: false
 
+env:
+  BURROW_NIX_CACHE_URL: ${{ vars.BURROW_NIX_CACHE_URL || 'https://nix.burrow.net/burrow' }}
+  BURROW_NIX_CACHE_PUBLIC_KEY: ${{ vars.BURROW_NIX_CACHE_PUBLIC_KEY }}
+
 jobs:
   release:
     name: Release Build
@@ -39,6 +43,19 @@ jobs:
           chmod +x Scripts/ci/build-release-artifacts.sh
           nix develop .#ci -c Scripts/ci/build-release-artifacts.sh
 
+      - name: Flatten release assets
+        shell: bash
+        env:
+          RELEASE_REF: ${{ github.ref_name }}
+        run: |
+          set -euo pipefail
+          ref="${RELEASE_REF:-manual-${GITHUB_SHA::7}}"
+          mkdir -p dist/release-assets
+          find "dist/builds/${ref}" -type f \( -name '*.tar.gz' -o -name '*.zip' -o -name '*.sha256' -o -name 'README.txt' \) -exec cp {} dist/release-assets/ \;
+          rm -rf dist/builds
+          cp dist/release-assets/* dist/
+          find dist -maxdepth 1 -type f -print | sort
+
       - name: Upload release artifacts
         uses: https://code.forgejo.org/actions/upload-artifact@v4
         with: