[Copilot]

The GUI workflows were intermittently failing while staging the croc binary because unauthenticated calls to repos/schollz/croc/releases/latest returned 403, which then caused JSON parsing to fail. This change hardens release metadata retrieval without altering artifact selection logic.

• Root-cause-aligned fix: metadata fetch auth

  • Switched release metadata lookup from unauthenticated curl to gh api.
  • Injected GH_TOKEN: ${{ github.token }} for the download step in both workflows.

• Scope

  • Updated:
    • .github/workflows/build-gui.yml
    • .github/workflows/release-gui.yml
  • Removed now-unused META_URL variable in both files.

• Behavior preserved

  • Existing asset resolution (endsWith("_" + ASSET_SUFFIX)), archive extraction, and binary staging remain unchanged.

DOWNLOAD_URL=$(gh api repos/schollz/croc/releases/latest | node -e '...')

env:
  ASSET_SUFFIX: ${{ matrix.croc_asset }}
  GH_TOKEN: ${{ github.token }}