feat: add Windows binary to release pipeline and self-updater #387

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	workflow_dispatch:

	jobs:
	test-matrix:
	strategy:
	matrix:
	os: [ubuntu-latest, windows-latest]
	runs-on: ${{ matrix.os }}
	steps:
	- uses: actions/checkout@v6

	- uses: actions/setup-go@v6
	with:
	go-version-file: go.mod

	- name: Vet
	shell: bash
	run: go vet ./...

	- name: Test
	shell: bash
	run: go test -race -count=1 ./...

	# Gate job — preserves the "test" check name for branch protection rules.
	test:
	needs: [test-matrix]
	if: always()
	runs-on: ubuntu-latest
	steps:
	- name: Check matrix results
	run: \|
	if [ "${{ needs.test-matrix.result }}" != "success" ]; then
	echo "Test matrix failed: ${{ needs.test-matrix.result }}"
	exit 1
	fi

	lint:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v6

	- uses: actions/setup-go@v6
	with:
	go-version-file: go.mod

	- name: golangci-lint
	uses: golangci/golangci-lint-action@v9
	with:
	version: v2.11.3

	build-matrix:
	strategy:
	matrix:
	os: [ubuntu-latest, windows-latest]
	runs-on: ${{ matrix.os }}
	steps:
	- uses: actions/checkout@v6

	- uses: actions/setup-go@v6
	with:
	go-version-file: go.mod

	- name: Build
	shell: bash
	run: go build -ldflags "-s -w" -o bin/mnemonic ./cmd/mnemonic

	# Gate job — preserves the "build" check name for branch protection rules.
	build:
	needs: [build-matrix]
	if: always()
	runs-on: ubuntu-latest
	steps:
	- name: Check matrix results
	run: \|
	if [ "${{ needs.build-matrix.result }}" != "success" ]; then
	echo "Build matrix failed: ${{ needs.build-matrix.result }}"
	exit 1
	fi

Provide feedback