f7119e2361
golang:1.25 and the stale almalinux9-gobuilder pin are replaced by gobuilder:0.1.2-alma9 on every step that invokes the Go toolchain, with GOCACHEPROG wired to the baked-in go-cache-plugin against the shared S3 cache bucket. - pre-commit, test, release build/test: image -> gobuilder:0.1.2-alma9 - add GOCACHE_* env + AWS creds from org secrets, absolute cache-dir - lint step (test.yaml), buildx steps, release upload step untouched