Split keyring binding fetch into its own step and drop comment

Self-documenting step names (Install / Fetch keyring native bindings /
Build) replace the comment; read the version with bun instead of sed.

Author: ChiragAgg5k

templates/cli/.github/workflows/publish.yml

@@ -43,21 +43,21 @@ jobs:
           sudo make
           sudo make install
 
-      - name: Install dependencies and build for Linux and Windows
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Fetch keyring native bindings for all targets
         run: |
-          bun install --frozen-lockfile
-          # @napi-rs/keyring ships its native binding as os/cpu-gated platform
-          # packages, so `bun install` only fetches the host's. bun --compile
-          # embeds a binding only when its platform package is present on disk, so
-          # fetch the rest before cross-compiling; otherwise those binaries
-          # silently fall back to plaintext credential storage.
-          KEYRING_VERSION="$(sed -n 's/.*"version": *"\([^"]*\)".*/\1/p' node_modules/@napi-rs/keyring/package.json | head -1)"
+          version="$(bun -e 'console.log(require("@napi-rs/keyring/package.json").version)')"
           for triple in darwin-arm64 darwin-x64 linux-x64-gnu linux-arm64-gnu win32-x64-msvc win32-arm64-msvc; do
-            dir="node_modules/@napi-rs/keyring-${triple}"
-            ls "${dir}"/*.node >/dev/null 2>&1 && continue
-            mkdir -p "${dir}"
-            curl -fsSL "https://registry.npmjs.org/@napi-rs/keyring-${triple}/-/keyring-${triple}-${KEYRING_VERSION}.tgz" | tar -xz -C "${dir}" --strip-components=1
+            dir="node_modules/@napi-rs/keyring-$triple"
+            [ -d "$dir" ] && continue
+            mkdir -p "$dir"
+            curl -fsSL "https://registry.npmjs.org/@napi-rs/keyring-$triple/-/keyring-$triple-$version.tgz" | tar -xz -C "$dir" --strip-components=1
           done
+
+      - name: Build for Linux and Windows
+        run: |
           bun run linux-x64
           bun run linux-arm64
           bun run mac-x64