argosfs: pin stable release source

[fwerkor]

Summary

• update the CapOS ArgosFS package from the unreachable historical 0.1.0 commit to the v1.0.0 release commit
• update the deterministic OpenWrt source mirror hash
• add an ArgosFS source-pin preflight to both OS Sanity and OS Real Boot
• require the package commit to match the advertised v<PKG_VERSION> release tag and verify all CapOS integration files exist

Root cause

Real Boot run 33358840723 got past the snapd packaging fix, then failed on both x86_64 and aarch64 because 45e6a5c455c0068207eeeaceb945d7355487ede4 was no longer advertised/reachable through normal repository history. GitHub archive downloads returned 404 and OpenWrt's clone fallback could not check out the tree.

Validation

• v1.0.0 resolves to 8a9f001f73dd3e8a8b3c406198a21f8786023f18
• all CapOS ArgosFS integration files exist at that release
• upstream cargo check --locked passes
• OpenWrt dl_github_archive.py reproduces mirror hash a01053a6c7a27f1e391439b2fa3252fb0bc4342f51931f06550c4660ef1daf74
• new source preflight passes for v1.0.0 and rejects the old unprotected commit
• workflow YAML parses and git diff --check passes

The preflight runs immediately after checkout so this class of failure is caught before any expensive toolchain/image build starts.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	capos-snap	172c5c6	Aug 31 2026, 11:20 AM