fix(action): Resolve major tag to matching binary

[BYK]

Summary

• Resolve moving action refs such as getsentry/craft@v2 to the release version recorded in that action revision’s package.json. The current v2 ref points to 2.33.0, but no GitHub release named v2 exists, so the action previously downloaded the latest release instead.
• Fail closed if the major tag points to a prerelease or different major, or if the matching release asset is missing. Keep explicit craft_version and latest support.

Validation

• A regression failed before the fix. Focused action tests: 37 passed. Full Vitest: 1,242 passed, 1 skipped across 62 files.
• Typecheck, lint (0 errors, 7 existing warnings), format, build, and shell syntax checks passed.
• Verified v2 and 2.33.0 tags point to the same release commit and v2 contains package version 2.33.0.