ci: skip expired OSS certificate verification

[lixd]

Summary

• pass -k to the OSS download in the build workflow
• apply the same workaround to the release workflow
• restore CI downloads while the oss.kubeclipper.io certificate is expired

Verification

• confirmed the download returns HTTP 200 when certificate verification is skipped
• git diff --check passed

This is a temporary workaround. The OSS certificate should still be renewed and -k removed afterward.

[gemini-code-assist]

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 47.30%. Comparing base (c8ec5fe) to head (67206c5).
⚠️ Report is 5 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #431   +/-   ##
=======================================
  Coverage   47.30%   47.30%           
=======================================
  Files           7        7           
  Lines         613      613           
  Branches      176      176           
=======================================
  Hits          290      290           
  Misses        250      250           
  Partials       73       73           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.