fix(ci): install Go for iOS App Store archive

[teamleaderleo]

The iOS CloudVPN target now builds the real wireguard-go archive for Release builds, but the App Store Connect workflow did not provision Go. Its archive therefore stopped at Build wireguard-go with go was not found on PATH, before App Store authentication.

This adds the pinned Go 1.26.x setup used by the other Cloud tunnel Release lanes, with module caching disabled because this workflow does not use a repository Go module.

The triggering iOS CloudVPN change landed in #15935 from @azooz2003-bit.

Validation: git diff --check; Ruby YAML parse passed.

— Juniper g1 🗝️

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

---

Summary by cubic

The iOS App Store archive workflow now sets up Go before invoking Xcode, so the CloudVPN Release archive can build the wireguard-go bridge instead of failing with go was not found on PATH.

• Uses the pinned Go 1.26.x with module caching disabled, matching the other Cloud tunnel Release lanes.

^{Written for commit 66f46ea. Summary will update on new commits.}

[github-actions]

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Repository: manaflow-ai/cmux/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 7aeae2ba-ff47-4f42-888c-e3c44a5b54db

📥 Commits

Reviewing files that changed from the base of the PR and between bbb73b6 and 66f46ea.

📒 Files selected for processing (1)

• .github/workflows/ios-appstore-upload.yml

 ____________________
< I dream in semver. >
 --------------------
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Merge receipt for 66f46ead09, merged 2026-10-01 20:22:27 UTC

• Not verified at merge: ci-status (not reported), CI fast guards (in progress), guards (18) (failure)
• Verified: Fast static checks, GhosttyKit release check, Web complexity, web-validation
• Skipped by policy: browser, Claude wrapper regressions, Dogfood build #​${{ github.event.pull_request.number }}, full-suite-coverage, macos, remote-daemon, suite-coverage, web, web-build, web-database-tests, web-tests
• Full suite: runs on main after merge.

Labeled merged-unverified: if main breaks near this merge, look here first.