feat: add meshix-cli-bin package

[anand-testcompare]

Summary

• add a meshix-cli-bin PKGBUILD, install hook, and updater script that track stable shpitdev/meshix-observability linux amd64 releases through the same authenticated private-release path used by the other SHPIT packages
• document the current private-release auth requirements and align the repo with the downstream dispatch shape from the source repo
• refresh the existing private package metadata to the latest stable releases so validate-packages.sh is fully back in sync

Validation

• ./scripts/update-packages.sh auto
• ./scripts/validate-packages.sh

[devin-ai-integration]

Devin Review found 1 potential issue.

🐛 1 issue in files not directly in the diff

🐛 meshix-cli-bin directory not staged in version-bumps workflow commit step (.github/workflows/version-bumps.yml:54)

The git add command on line 54 of version-bumps.yml explicitly lists directories to stage: README.md docs scripts .github/workflows tabex-bin osyrra-bin. The new meshix-cli-bin directory is missing from this list. When the workflow runs update-packages.sh auto (line 39), it will update meshix-cli-bin/PKGBUILD and meshix-cli-bin/.SRCINFO via scripts/update-meshix-cli-bin.sh, but those changes will never be committed because the directory isn't staged. The automated version-bump PR will silently drop all meshix-cli-bin updates.

View 3 additional findings in Devin Review.

[anand-testcompare]

Fixed the Devin workflow staging issue and the broader Meshix bump lane in 34a6395 / d8f5b35: meshix-cli-bin is now staged by version-bumps.yml, and the workflow also accepts an optional meshix_cli_version input so upstream release dispatches can pin the exact tag when that lane is enabled.