fix(ci): use checksums-bsd for yq integrity verification

The checksums file from mikefarah/yq uses a custom multi-hash-per-line
format that isn't compatible with sha256sum -c (which expects GNU
coreutils format). Switched to checksums-bsd, which uses the standard
BSD-style "SHA256 (file) = hash" layout; a small sed converts that to
GNU format for verification.

Author: cds-amal

.github/scripts/install-yq.sh

@@ -12,13 +12,19 @@ BASE_URL="https://github.com/mikefarah/yq/releases/download/${YQ_VERSION}"
 mkdir -p "$INSTALL_DIR"
 
 wget -qO "$INSTALL_DIR/yq_linux_amd64" "${BASE_URL}/yq_linux_amd64"
-wget -qO "$INSTALL_DIR/checksums"       "${BASE_URL}/checksums"
+wget -qO "$INSTALL_DIR/checksums-bsd"   "${BASE_URL}/checksums-bsd"
 
 (
     cd "$INSTALL_DIR"
-    grep 'yq_linux_amd64$' checksums | sha256sum -c -
+    # checksums-bsd uses BSD-style:   SHA256 (yq_linux_amd64) = 0c4d965e...
+    # sha256sum -c expects GNU-style: 0c4d965e...  yq_linux_amd64
+    # sed captures the filename (\1) and hash (\2), discarding "SHA256 (", ") = ",
+    # then emits them in reversed order to match GNU format.
+    grep 'SHA256 (yq_linux_amd64)' checksums-bsd \
+        | sed 's/SHA256 (\(.*\)) = \(.*\)/\2  \1/' \
+        | sha256sum -c -
     mv yq_linux_amd64 yq
-    rm -f checksums
+    rm -f checksums-bsd
     chmod +x yq
 )