[skip-release] Make Homebrew recovery source explicit (#40)

Co-authored-by: Joe Corall <joe@libops.io>

Author: pennypacker-he

.github/workflows/release-config.yaml

@@ -63,3 +63,16 @@ jobs:
             echo "Only the reviewed brews deprecation is allowed" >&2
             exit 1
           fi
+
+      - name: Verify recovery-safe Homebrew source URL
+        shell: bash
+        env:
+          EXPECTED_BREW_URL: '    url_template: "https://github.com/${{ github.repository }}/releases/download/{{ .Tag }}/{{ .ArtifactName }}"'
+        run: |
+          set -euo pipefail
+
+          matches="$(grep -Fxc "$EXPECTED_BREW_URL" .goreleaser.yaml || true)"
+          if [[ "$matches" -ne 1 ]]; then
+            echo "Expected exactly one recovery-safe Homebrew url_template" >&2
+            exit 1
+          fi

.goreleaser.yaml

@@ -45,6 +45,7 @@ brews:
   - name: sitectl-drupal
     description: "A sitectl plugin for Drupal websites"
     homepage: "https://github.com/libops/sitectl-drupal"
+    url_template: "https://github.com/libops/sitectl-drupal/releases/download/{{ .Tag }}/{{ .ArtifactName }}"
     license: MIT
     commit_author:
       name: sitectl-dev[bot]