make packages (or make release PACKAGES=1) packages the binaries from the release tarballs with the unit rendered for /usr/bin and the license text, and rewrites SHA256SUMS over tarballs and packages. nfpm 2.48.0 is installed pinned with checksum by scripts/ci/install-tools.sh, which can now install single tools. Make targets lint-brand and sign-release. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>