nfpm re-renders semver versions into the filename, so a zero-padded
version like 2025.08.03 ships as 2025.8.3. The existence probe used the
raw metadata version, always 404'd, and rebuilt and republished
nzbget_exporter and unkin-ca-certificates on every pipeline run.
- add nfpm_rpm_version/rpm_file_name mirroring nfpm's rendering
- build the probe filename through rpm_file_name
- drop dead normalize_version and get_package_full_name