Summary

• package release archives with a consistent snare binary name so install.sh extracts the expected executable
• verify release archive shape in CI and add Go vet plus Worker tests to the release workflow
• update release/Docker builds to Go 1.25.10 and refresh vulnerable Go dependencies reported by govulncheck
• require SNARE_DASHBOARD_TOKEN in Docker Compose and document the self-hosted compose startup path
• fix the Compose command so it correctly invokes the Docker image entrypoint as snare serve ...
• add a Docker Compose smoke test to PR CI so self-hosted startup regressions are caught before merge
• add a Docker build context ignore file and expose port 80 for HTTP-01/TLS self-hosting flows
• make installer checksum verification fail clearly when no SHA-256 tool is available

Tests

• go test ./... -race -count=1
• go vet ./...
• govulncheck ./...
• npm test in worker/
• sh -n install.sh
• SNARE_DASHBOARD_TOKEN=0123456789abcdef0123456789abcdef docker compose config --quiet
• SNARE_DASHBOARD_TOKEN=0123456789abcdef0123456789abcdef docker compose -p snare-pr43-test up -d --build followed by /health
• release archive smoke test for snare_linux_amd64.tar.gz containing executable ./snare
• Docker image build and /health check