fix: replace go mod tidy with go mod download in goreleaser

go mod tidy fails because sourcegraph/scip transitively imports
bufbuild/protocompile/experimental/report/tags which doesn't exist
in the latest released version. The CLI build doesn't need those
packages — go mod download fetches only what's in go.sum.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Andre Nogueira <aanogueira@protonmail.com>

Author: aanogueira

.goreleaser.yml

@@ -10,7 +10,7 @@ metadata:
 
 before:
   hooks:
-    - go mod tidy
+    - go mod download
     - go mod verify
 
 builds: