fix(aiden-runner): download release tarball with curl instead of wget

Alpine's wget 1.25 (musl) rejects the --fail flag, which broke the
download_binary stage in CI. curl -fsSL provides equivalent fail-on-HTTP-error
behavior and was validated with local buildx builds for linux/amd64 and
linux/arm64.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: sks

aiden-runner/Dockerfile

@@ -4,13 +4,13 @@ ARG AIDEN_RUNNER_VERSION
 ARG TARGETOS
 ARG TARGETARCH
 
-# install wget
+# curl -f: Alpine's wget lacks --fail in this image
 RUN apk update && \
-    apk add --no-cache wget && \
+    apk add --no-cache curl && \
     rm -rf /var/cache/apk/*
 
 RUN URL="https://releases.stackgen.com/binaries/aios-remote/v${AIDEN_RUNNER_VERSION}/aiden-runner_${AIDEN_RUNNER_VERSION}_${TARGETOS}_${TARGETARCH}.tar.gz" && \
-    wget --fail -O aiden-runner.tar.gz "$URL" || { echo "Error: failed to download aiden-runner from $URL" >&2; exit 1; } && \
+    curl -fsSL -o aiden-runner.tar.gz "$URL" || { echo "Error: failed to download aiden-runner from $URL" >&2; exit 1; } && \
     tar -xzf aiden-runner.tar.gz && \
     test -f aiden-runner || { echo "Error: extracted archive does not contain aiden-runner binary" >&2; exit 1; } && \
     mv aiden-runner /tmp/aiden-runner && \