ci: Bump tag-release golangci-lint to v8

Align tag-release Lint with push-ci / PR CI:
- golangci/golangci-lint-action@v8
- version: v2.13.2
- args: --timeout=5m

Gate the Fyne release job with needs: [lint, test] so a broken
lint cannot publish (root cause of tag v1.0.2 overall failure).

Add optional .golangci.yml from steamcache2 v2 skeleton (misspell;
no steamcache-specific path excludes; no gosec until Rex wants it).

Keep Fyne + release-action path; no GoReleaser; no master→main rename.

Fixes #34

.gitea/workflows/tag-release.yaml

@@ -28,9 +28,10 @@ jobs:
         run: go mod tidy
 
       - name: Lint
-        uses: golangci/golangci-lint-action@v3
+        uses: golangci/golangci-lint-action@v8
         with:
-          version: latest
+          version: v2.13.2
+          args: --timeout=5m
 
   test:
     name: Test
@@ -64,6 +65,7 @@ jobs:
 
   release:
     name: Build versioned release
+    needs: [lint, test]
     runs-on: ubuntu-latest
     steps:
       - name: Checkout