fix(release): download published audit files by release id

gh release download can see no assets after a draft is published, so the
Linux and Android publication audits fail and the Release returns to Draft.
Download those audit files through the release API URL.

.github/workflows/desktop-build.yml

@@ -857,14 +857,15 @@ jobs:
           RELEASE_TAG: ${{ inputs.release_tag || github.event.release.tag_name }}
         run: |
           mkdir -p release/desktop
-          gh release download "$RELEASE_TAG" \
+          node scripts/download-release-assets.mjs \
             --repo "$GITHUB_REPOSITORY" \
+            --tag "$RELEASE_TAG" \
+            --dir release/desktop \
             --pattern 'EdgeEver-*-windows-x64.exe' \
             --pattern 'latest.yml' \
             --pattern 'latest-windows.json' \
             --pattern 'latest-windows.json.sig' \
-            --pattern 'SHA256SUMS-windows.txt' \
-            --dir release/desktop
+            --pattern 'SHA256SUMS-windows.txt'
 
       - name: Verify signature and installer digests
         run: node scripts/verify-windows-update-release.mjs release/desktop
@@ -894,12 +895,13 @@ jobs:
           RELEASE_TAG: ${{ inputs.release_tag || github.event.release.tag_name }}
         run: |
           mkdir -p release/desktop
-          gh release download "$RELEASE_TAG" \
+          node scripts/download-release-assets.mjs \
             --repo "$GITHUB_REPOSITORY" \
+            --tag "$RELEASE_TAG" \
+            --dir release/desktop \
             --pattern 'EdgeEver-*-linux-x64.AppImage' \
             --pattern 'latest-linux.yml' \
-            --pattern 'SHA256SUMS-linux.txt' \
-            --dir release/desktop
+            --pattern 'SHA256SUMS-linux.txt'
 
       - name: Verify Linux automatic update release
         run: node scripts/verify-linux-update-release.mjs release/desktop

.github/workflows/mobile-build.yml

@@ -141,10 +141,11 @@ jobs:
           GH_TOKEN: ${{ github.token }}
         run: |
           mkdir -p "$RUNNER_TEMP/native-assets"
-          gh release download "$CURRENT_TAG" \
+          node scripts/download-release-assets.mjs \
             --repo "$GITHUB_REPOSITORY" \
-            --pattern 'edgeever-android-v*-arm64-v8a.apk' \
-            --dir "$RUNNER_TEMP/native-assets"
+            --tag "$CURRENT_TAG" \
+            --dir "$RUNNER_TEMP/native-assets" \
+            --pattern 'edgeever-android-v*-arm64-v8a.apk'
           apk_path="$(find "$RUNNER_TEMP/native-assets" -type f -name 'edgeever-android-v*-arm64-v8a.apk' -print -quit)"
           test -n "$apk_path"
           test -n "$ANDROID_PLAY_APP_SIGNER_SHA256"