ci(github-actions): install SurrealDB from a pinned release tarball, not the install script

Second attempt at the same step. install.surrealdb.com's script does not accept
--yes — it exits 2 with `sh: 79: shift: can't shift that many` — and without a
flag it prompts, which is worse on a runner.

Downloads the binary straight from the GitHub release instead. Pinned to v3.2.0
rather than tracking latest, deliberately: an upstream release that broke this
job would present as a broken pull request, and a gate that cries wolf stops
being read. Bump the version on purpose.

The release assets are version-stamped (surreal-v3.2.0.linux-amd64.tgz), so the
`releases/latest/download/surreal-latest.…` convention 404s — verified before
committing, along with the pinned URL returning 200.

Version sanity: local dev runs server 3.2.3 against the `surrealdb` npm client
at ^2.0.4 and the suite passes, so a 3.2.x server is the configuration these
tests actually pass under.

Files changed:
- .github/workflows/ci.yml

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PZJvZWco3z7SR2dEhFqEjA

Author: mpstaton

.github/workflows/ci.yml

@@ -97,10 +97,17 @@ jobs:
       # binary is already on PATH, so the suite passes locally and fails here
       # with `spawn surreal ENOENT` — the same laptop-vs-clean-machine asymmetry
       # that hid the tsconfig bug for twelve days. Install it explicitly.
+      # Pinned rather than `latest`, deliberately: an upstream release that
+      # breaks this job would look like a broken PR, and a gate that cries wolf
+      # stops being read. Bump the version here on purpose.
+      # (install.surrealdb.com's script is not used — it rejects --yes and
+      # prompts, which hangs or exits 2 on a runner.)
       - name: Install SurrealDB CLI (Groups E/J spawn it)
+        env:
+          SURREAL_VERSION: v3.2.0
         run: |
-          curl -sSf https://install.surrealdb.com | sh -s -- --yes
-          echo "$HOME/.surrealdb" >> "$GITHUB_PATH"
+          curl -sSfL "https://github.com/surrealdb/surrealdb/releases/download/${SURREAL_VERSION}/surreal-${SURREAL_VERSION}.linux-amd64.tgz" \
+            | sudo tar -xz -C /usr/local/bin
 
       - name: Verify surreal is on PATH
         run: surreal version