Add GitHub token authentication to Makefile downloads

Fixes GitHub rate limiting issues in CI by automatically using GITHUB_TOKEN
when available for downloads from GitHub (raw.githubusercontent.com and
github.com/releases). Falls back gracefully to unauthenticated downloads
when no token is present, maintaining compatibility with local development.

Updated targets:
- kustomize (install script)
- yq (binary release)
- kuttl (binary release)
- operator-sdk (binary release)
- opm (binary release)
- golangci-lint (install script)

Usage in CI: export GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
Local dev: no changes required

Jira: OSPRH-17779

Signed-off-by: Martin Schuppert <mschuppert@redhat.com>

Author: stuggi

Makefile

@@ -187,7 +187,14 @@ tidy: ## Run go mod tidy on every mod file in the repo
 
 .PHONY: golangci-lint
 golangci-lint:
-	test -s $(LOCALBIN)/golangci-lint || curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s v1.59.1
+	test -s $(LOCALBIN)/golangci-lint || { \
+		CURL_AUTH_HEADER=""; \
+		if [ -n "$$GITHUB_TOKEN" ]; then \
+			echo "Using GitHub token for golangci-lint download"; \
+			CURL_AUTH_HEADER="-H Authorization: token $$GITHUB_TOKEN"; \
+		fi; \
+		curl -sSfL $$CURL_AUTH_HEADER https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s v1.59.1; \
+	}
 	$(LOCALBIN)/golangci-lint run --fix
 
 MAX_PROCS := 5
@@ -322,7 +329,14 @@ $(KUSTOMIZE): $(LOCALBIN)
 		echo "$(LOCALBIN)/kustomize version is not expected $(KUSTOMIZE_VERSION). Removing it before installing."; \
 		rm -rf $(LOCALBIN)/kustomize; \
 	fi
-	test -s $(LOCALBIN)/kustomize || { curl -Ss $(KUSTOMIZE_INSTALL_SCRIPT) | bash -s -- $(subst v,,$(KUSTOMIZE_VERSION)) $(LOCALBIN); }
+	test -s $(LOCALBIN)/kustomize || { \
+		CURL_AUTH_HEADER=""; \
+		if [ -n "$$GITHUB_TOKEN" ]; then \
+			echo "Using GitHub token for kustomize download"; \
+			CURL_AUTH_HEADER="-H Authorization: token $$GITHUB_TOKEN"; \
+		fi; \
+		curl -Ss $$CURL_AUTH_HEADER $(KUSTOMIZE_INSTALL_SCRIPT) | bash -s -- $(subst v,,$(KUSTOMIZE_VERSION)) $(LOCALBIN); \
+	}
 
 .PHONY: controller-gen
 controller-gen: gowork $(CONTROLLER_GEN) ## Download controller-gen locally if necessary. If wrong version is installed, it will be overwritten.
@@ -352,7 +366,14 @@ kuttl-test: ## Run kuttl tests
 .PHONY: kuttl
 kuttl: $(KUTTL) ## Download kubectl-kuttl locally if necessary.
 $(KUTTL): $(LOCALBIN)
-	test -s $(LOCALBIN)/kubectl-kuttl || curl -L -o $(LOCALBIN)/kubectl-kuttl https://github.com/kudobuilder/kuttl/releases/download/v$(KUTTL_VERSION)/kubectl-kuttl_$(KUTTL_VERSION)_linux_x86_64
+	test -s $(LOCALBIN)/kubectl-kuttl || { \
+		CURL_AUTH_HEADER=""; \
+		if [ -n "$$GITHUB_TOKEN" ]; then \
+			echo "Using GitHub token for kuttl download"; \
+			CURL_AUTH_HEADER="-H Authorization: token $$GITHUB_TOKEN"; \
+		fi; \
+		curl -Ss -L $$CURL_AUTH_HEADER -o $(LOCALBIN)/kubectl-kuttl https://github.com/kudobuilder/kuttl/releases/download/v$(KUTTL_VERSION)/kubectl-kuttl_$(KUTTL_VERSION)_linux_x86_64; \
+	}
 	chmod +x $(LOCALBIN)/kubectl-kuttl
 
 .PHONY: operator-sdk
@@ -364,7 +385,12 @@ ifeq (, $(shell which operator-sdk 2>/dev/null))
 	set -e ;\
 	mkdir -p $(dir $(OPERATOR_SDK)) ;\
 	OS=$(shell go env GOOS) && ARCH=$(shell go env GOARCH) && \
-	curl -sSLo $(OPERATOR_SDK) https://github.com/operator-framework/operator-sdk/releases/download/$(OPERATOR_SDK_VERSION)/operator-sdk_$${OS}_$${ARCH} ;\
+	CURL_AUTH_HEADER="" ;\
+	if [ -n "$$GITHUB_TOKEN" ]; then \
+		echo "Using GitHub token for operator-sdk download"; \
+		CURL_AUTH_HEADER="-H Authorization: token $$GITHUB_TOKEN"; \
+	fi ;\
+	curl -sSL $$CURL_AUTH_HEADER -o $(OPERATOR_SDK) https://github.com/operator-framework/operator-sdk/releases/download/$(OPERATOR_SDK_VERSION)/operator-sdk_$${OS}_$${ARCH} ;\
 	chmod +x $(OPERATOR_SDK) ;\
 	}
 else
@@ -398,7 +424,12 @@ ifeq (,$(shell which opm 2>/dev/null))
 	set -e ;\
 	mkdir -p $(dir $(OPM)) ;\
 	OS=$(shell go env GOOS) && ARCH=$(shell go env GOARCH) && \
-	curl -sSLo $(OPM) https://github.com/operator-framework/operator-registry/releases/download/v1.29.0/$${OS}-$${ARCH}-opm ;\
+	CURL_AUTH_HEADER="" ;\
+	if [ -n "$$GITHUB_TOKEN" ]; then \
+		echo "Using GitHub token for opm download"; \
+		CURL_AUTH_HEADER="-H Authorization: token $$GITHUB_TOKEN"; \
+	fi ;\
+	curl -sSL $$CURL_AUTH_HEADER -o $(OPM) https://github.com/operator-framework/operator-registry/releases/download/v1.29.0/$${OS}-$${ARCH}-opm ;\
 	chmod +x $(OPM) ;\
 	}
 else
@@ -408,9 +439,13 @@ endif
 
 .PHONY: yq
 yq: $(LOCALBIN) ## Download and install yq in local env
-	test -s $(LOCALBIN)/yq || ( cd $(LOCALBIN) &&\
-	wget https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64.tar.gz -O - |\
-	tar xz && mv yq_linux_amd64 $(LOCALBIN)/yq )
+	test -s $(LOCALBIN)/yq || ( cd $(LOCALBIN) && \
+		CURL_AUTH_HEADER=""; \
+		if [ -n "$$GITHUB_TOKEN" ]; then \
+			echo "Using GitHub token for yq download"; \
+			CURL_AUTH_HEADER="-H Authorization: token $$GITHUB_TOKEN"; \
+		fi; \
+		curl -Ss -L $$CURL_AUTH_HEADER https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64.tar.gz | tar xz && mv yq_linux_amd64 $(LOCALBIN)/yq )
 
 .PHONY: oc
 oc: $(LOCALBIN) ## Download and install oc in local env