feat: publish native Arch Linux packages

[rianjs]

Publish native Arch packages through the existing signed Open CLI Collective pacman repository. Preserve current package and executable names, use whole-second timestamps for pacman integrity checks, and include packaging changes in automatic-release triggers. Document installation alongside the existing package channels.

Add full GoReleaser rendering and clean Arch install/ownership/integrity/uninstall/reinstall checks, using the working pattern from codereview-cli #648.

Validation: GoReleaser configuration and Actionlint pass. Full source packaging and native installation are checked by the new PR workflow. cfl and jtk retain separate release triggers and package validation.

[monit-reviewer]

Automated PR Review

Reviewed commit: f5e317ab9eee
Profile: codex-monit-reviewer - Posting as: monit-reviewer

Summary

Reviewer	Findings
automation:ci-release	0
policies:conventions	0
documentation:docs	0
structure:repo-health	0
automation:ci-deploy	0

Reviewer Coverage

• automation:ci-release — complete (broad); inspected 5 assigned files (6 inspected across reviewers): .github/workflows/arch-package.yml, .github/workflows/auto-release-cfl.yml, .github/workflows/auto-release-jtk.yml, .goreleaser-cfl.yml, .goreleaser-jtk.yml; skipped: none; constraints: Actionlint passed. Full GoReleaser rendering and Arch installation were not run locally because GoReleaser is unavailable. Review limited to the assigned CI, release, and packaging files and relevant local context. The shared auto-release workflow implementation could not be fetched, so its release-path filtering semantics could not be independently verified.
• policies:conventions — complete (broad); skipped: none; constraints: Review limited to the six assigned files and visible repository guidance. Shared standards and automation sibling copies were unavailable; attempts to fetch shared CI, release, and distribution standards failed. No missing policy contents were inferred.
• documentation:docs — complete (broad); inspected 1 assigned file (6 inspected across reviewers): README.md; skipped: none; constraints: Review limited to README.md, with local packaging configuration and workflow inspected for supporting context. The linked repository page was available only as a month-old cached copy; current Arch repository setup instructions could not be verified because live retrieval failed.
• structure:repo-health — complete (broad); inspected 5 assigned files (6 inspected across reviewers): .github/workflows/arch-package.yml, .github/workflows/auto-release-cfl.yml, .github/workflows/auto-release-jtk.yml, .goreleaser-cfl.yml, .goreleaser-jtk.yml; skipped: none; constraints: Review focused on structural risks in the five assigned files and relevant local guidance. Shared automation and standards repositories were unavailable locally; their implementations were not verified. The macOS packaging and Arch container workflow was inspected statically, not executed.
• automation:ci-deploy — complete (broad); inspected 5 assigned files (6 inspected across reviewers): .github/workflows/arch-package.yml, .github/workflows/auto-release-cfl.yml, .github/workflows/auto-release-jtk.yml, .goreleaser-cfl.yml, .goreleaser-jtk.yml; skipped: none; constraints: Native packaging checks were not executed: GoReleaser is unavailable and Docker daemon access is denied. Review limited to the five assigned automation and packaging files, with supporting repo-local guidance and release manifests. Shared reusable workflow source could not be fetched, so its release-path matching implementation was not verified.

Inspected files (6)

• .github/workflows/arch-package.yml
• .github/workflows/auto-release-cfl.yml
• .github/workflows/auto-release-jtk.yml
• .goreleaser-cfl.yml
• .goreleaser-jtk.yml
• README.md

0 PR discussion threads considered. 0 summarized; 0 resolved.

---

Completed in 1m 31s | gpt-6.1-sol | cr 0.10.323

Field	Value
Model	gpt-6.1-sol
Reviewers	automation:ci-release, policies:conventions, documentation:docs, structure:repo-health, automation:ci-deploy
Engine	codex_cli · gpt-6.1-sol
Reviewed by	cr · monit-reviewer
Duration	1m 31s wall · 3m 17s compute
Cost	unavailable
Tokens	743.2k in / 4.4k out

Per-workstream usage

• orchestrator-selection — gpt-6.1-sol
  • In: 19.9k
  • Out: 639
  • Cache read: 12.3k
  • Cache create: unavailable
  • Cost: unavailable
  • Duration: 25s
• automation:ci-release — gpt-6.1-sol
  • In: 143.5k
  • Out: 763
  • Cache read: 117.4k
  • Cache create: unavailable
  • Cost: unavailable
  • Duration: 36s
• policies:conventions — gpt-6.1-sol
  • In: 73.1k
  • Out: 480
  • Cache read: 54.8k
  • Cache create: unavailable
  • Cost: unavailable
  • Duration: 22s
• documentation:docs — gpt-6.1-sol
  • In: 186.9k
  • Out: 419
  • Cache read: 161.5k
  • Cache create: unavailable
  • Cost: unavailable
  • Duration: 29s
• structure:repo-health — gpt-6.1-sol
  • In: 108.4k
  • Out: 498
  • Cache read: 83.8k
  • Cache create: unavailable
  • Cost: unavailable
  • Duration: 24s
• automation:ci-deploy — gpt-6.1-sol
  • In: 169.1k
  • Out: 911
  • Cache read: 146.3k
  • Cache create: unavailable
  • Cost: unavailable
  • Duration: 50s
• orchestrator-rollup — gpt-6.1-sol
  • In: 42.3k
  • Out: 723
  • Cache read: 32.0k
  • Cache create: unavailable
  • Cost: unavailable
  • Duration: 7s