Replace actions/checkout, setup-go, upload-artifact with an inline git
clone and a committed packwiz binary (tools/packwiz), so the workflow
needs no outside network beyond the docker image pull and a clone from
the instance itself. Release step (tag-gated) unchanged.
