fix(ci): stop the release upload racing itself on overlapping globs

The `files:` list matched nine assets twice.  `artifacts/openshrimp-*`
already covers the security-key helper, the HCS initrd, both rootfs
images and the RDP helper, and each of those carried its own explicit
line as well.  A file listed twice is uploaded twice concurrently, and
the second upload deletes the asset the first just created, so the step
dies on a bare "Not Found" against delete-a-release-asset with no
indication of which file or why.

The duplication has been there for several releases and was survivable
by luck: the action tolerates most of the resulting metadata races with
"Matching asset is present after refresh; continuing...".  v0.36.0 added
a 26th asset, shifted the timing, and lost — twice, the second time
worse, because a re-run finds the draft already populated and must
delete-then-replace every asset rather than merely upload it.

That the overlap is the cause rather than a coincidence is legible in
the first attempt's log: all eight metadata warnings name one of the
nine duplicated assets, and no asset outside that set produced one.

Dropping the five redundant patterns leaves all 26 assets covered, none
of them twice.  Verified by matching the pattern list against the real
asset names rather than by reading it.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: yjwong

.github/workflows/release.yaml

@@ -915,14 +915,15 @@ jobs:
         uses: softprops/action-gh-release@v2
         with:
           generate_release_notes: true
+          # These patterns must not overlap.  A file matched twice is
+          # uploaded twice concurrently, and the second upload deletes the
+          # asset the first just created — a race that fails the whole step
+          # with a bare "Not Found" once it lands badly.  `openshrimp-*`
+          # already covers the security-key helper, the HCS initrd, both
+          # rootfs images and the RDP helper, so none of those get a line.
           files: |
             artifacts/openshrimp-*
             artifacts/moonshine-stt-*
-            artifacts/openshrimp-security-key-vm-helper-*
-            artifacts/openshrimp-hcs-initrd.img*
-            artifacts/openshrimp-hcs-base-rootfs.vhdx.zst*
-            artifacts/openshrimp-hcs-gui-rootfs.vhdx.zst*
-            artifacts/openshrimp-hcs-rdp-helper-*
             artifacts/virtiofsd-*
             artifacts/OpenShrimp-*.dmg
             artifacts/*.tar.gz