eb9ce7ee3c
After merging the release PR, verify that: - The released tarball's SHA256 matches the tag's artifacthub-pkg.yml - The released tarball's SHA256 matches main's artifacthub-pkg.yml Fails loudly if they diverge so checksum drift is caught immediately. Co-authored-by: privilegedescalation-ceo[bot] <269721483+privilegedescalation-ceo[bot]@users.noreply.github.com>