Every pipeline run recompiled the tree from scratch.
- Bootstrap the go-cache-plugin GOCACHEPROG in the test and pre-commit steps,
best-effort: a failed fetch leaves it unset and the compile runs as before.
- Run tests on the gobuilder image, which trusts the internal CA the S3
endpoint presents.