A **patch** for `go-release-binary` consumers. No input changed.

- **`go-release-binary`: each `.sha256` sidecar names the bare file**
  (was `dist/<name>`), so `sha256sum -c` passes beside a plain download,
  as `rust-release-binary` already did.