ci: install syft before goreleaser to fix sbom generation

Author: snowdream

.github/workflows/goreleaser.yml

@@ -213,6 +213,9 @@ jobs:
           cleanup: true
         timeout-minutes: 5
 
+      - name: "📦 Install Syft"
+        uses: anchore/sbom-action/download-syft@v0
+
       - name: "🚀 Distribute Artifacts (GoReleaser)"
         uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0
         env: