Revert "chore(deps): bump softprops/action-gh-release from 2 to 3"

This reverts commit 0925ada (PR #9).

Smoke test (throwaway tag v0.6.1-rc1) showed action-gh-release@v3 breaks the
parallel release matrix in go.yml. The 5 matrix jobs each create the same
release for the tag; v3 added a "Finalizing release" update step that fails with
"Validation Failed: already_exists (tag_name)" when the jobs race, so the run
failed (fail-fast cancelled the rest) and only 4 of 10 assets uploaded plus a
leftover draft release. The same matrix publishes all 10 assets reliably on @v2
(v0.5.1 and v0.6.0).

Staying on @v2 (Node 20) keeps releases working. Adopting v3 would require
serializing release creation (e.g. a dedicated create-release job before the
upload matrix, or softprops make_latest/overwrite handling) - tracked
separately.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: TMHSDigital

.github/workflows/go.yml

@@ -114,7 +114,7 @@ jobs:
         fi
 
     - name: Upload binaries to release
-      uses: softprops/action-gh-release@v3
+      uses: softprops/action-gh-release@v2
       with:
         files: ${{ matrix.asset_name }}
       env:
@@ -125,7 +125,7 @@ jobs:
       run: sha256sum ${{ matrix.asset_name }} > ${{ matrix.asset_name }}.sha256
 
     - name: Upload checksum to release
-      uses: softprops/action-gh-release@v3
+      uses: softprops/action-gh-release@v2
       with:
         files: ${{ matrix.asset_name }}.sha256
       env: