Fix/aur ssh and bump to 0.4.6 (#20)

* Fix AUR SSH setup: use ssh-keyscan and unindented config

The heredoc was indented with the YAML, producing leading spaces in
~/.ssh/config which SSH silently ignores. Use ssh-keyscan for host
key verification and printf for the config to avoid whitespace issues.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* bump to 0.4.6

* rename workflow

* Remove push trigger from audit workflow to avoid duplicate runs

The push and pull_request triggers both fire on PR branches,
causing the audit to run twice. The pull_request trigger alone
is sufficient.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: joske

.github/workflows/audit.yml

@@ -1,8 +1,5 @@
 name: Security Audit
 on:
-  push:
-    paths:
-      - Cargo.lock
   pull_request:
     paths:
       - Cargo.lock

.github/workflows/publish.yml

@@ -1,4 +1,4 @@
-name: Publish to crates.io
+name: Release
 on:
   workflow_dispatch:
 jobs:
@@ -250,12 +250,8 @@ jobs:
           mkdir -p ~/.ssh
           echo "$AUR_SSH_KEY" > ~/.ssh/aur
           chmod 600 ~/.ssh/aur
-          cat >> ~/.ssh/config <<EOC
-          Host aur.archlinux.org
-            IdentityFile ~/.ssh/aur
-            User aur
-            StrictHostKeyChecking accept-new
-          EOC
+          ssh-keyscan aur.archlinux.org >> ~/.ssh/known_hosts
+          printf 'Host aur.archlinux.org\n  IdentityFile ~/.ssh/aur\n  User aur\n' >> ~/.ssh/config
       - name: Clone AUR repo
         run: git clone ssh://aur@aur.archlinux.org/mergers.git aur-repo
       - name: Update PKGBUILD

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "mergers"
-version = "0.4.5"
+version = "0.4.6"
 edition = "2024"
 description = "A visual diff and merge tool for files and directories"
 license = "GPL-2.0"