Switch the publish step from gcloud/GCS to rclone against Cloudflare R2
(zero egress), self-provision rclone on the runner, and add a
publish-manifest job that writes builds/keystone-builds.json so Keystone's
/builds page lists clean, channel-labelled entries (latest per
platform/channel) instead of raw object names.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Scheduled (weekly) + manual workflow that cooks/stages/packages standalone
Windows builds in both Development and Shipping configurations via a matrix,
publishing each to gs://.../builds/windows/<config>/. Platform is a matrix
axis mapped to a runner label, so Linux/Mac just need their own runner + a
matrix entry later.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Carlos