Releases are built locally (no runner) and uploaded to the Gitea generic
package registry. install.sh installs submarine plus a sub symlink;
`submarine update` replaces the binary after verifying its checksum.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>