fix(update): correct version detection and add universal binary fallback

Fixes terraphim-agent auto-update failure on Apple Silicon:

- terraphim_update: Fix version to report binary version instead
  of library version by passing env!(CARGO_PKG_VERSION)
- terraphim_update: Add universal-apple-darwin fallback for macOS platforms
- terraphim_update: Fix raw binary asset names to include binary prefix
- terraphim_agent: Pass correct version to UpdaterConfig
- terraphim_cli: Pass correct version to UpdaterConfig
- CI: Use self-hosted macOS runner for aarch64 builds (has zig installed)
- CI: Add zig installation step for macOS builds
- CI: Add asset verification job before release creation
- CI: Make release creation strict (only on full success)
- Add release asset verification script

Refs #1874

Author: Test User