ci: Bump tag-release golangci-lint to v8

Align tag-release Lint with push-ci / PR CI:
- golangci/golangci-lint-action@v8
- version: v2.13.2
- args: --timeout=5m

Gate the Fyne release job with needs: [lint, test] so a broken
lint cannot publish (root cause of tag v1.0.2 overall failure).

Add optional .golangci.yml from steamcache2 v2 skeleton (misspell;
no steamcache-specific path excludes; no gosec until Rex wants it).

Keep Fyne + release-action path; no GoReleaser; no master→main rename.

Fixes #34

.gitea/workflows/tag-release.yaml

@@ -67,8 +67,6 @@ jobs:
     name: Build versioned release
     needs: [lint, test]
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -120,10 +118,9 @@ jobs:
           name: swiped-mod-switcher-${{github.ref_name}}-${{github.run_number}}
           path: bin/
 
-      # Prefer built-in job token (Eva): gitea-release-action@v1 defaults to
-      # github.token / GITEA_TOKEN — no RELEASE_TOKEN / GIT_PACKAGES_TOKEN.
       - name: Release binaries
-        uses: https://gitea.com/actions/gitea-release-action@v1
+        uses: https://gitea.com/actions/release-action@main
         with:
           files: |-
             bin/**
+          api_key: '${{secrets.RELEASE_TOKEN}}'