release: fill the 0.0.40 offline release fallback digests (#63)

The offline fallback's digests are the digests of 0.0.40's own artifacts,
so they could not exist in the release commit. Now filled from the verified
artifacts:

  1Helm-0.0.40-arm64.dmg        d9686853…
  1Helm-0.0.40-mac-arm64.zip    a18f7b3e…
  1Helm-0.0.40-linux-node.tgz   95267b23…

Co-authored-by: Joseph Yaksich <gitcommit90@users.noreply.github.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: gitcommit90

site/server.mjs

@@ -40,16 +40,15 @@ const RELEASE_CACHE_MS = 10 * 60_000;
 // 64 hex characters, so latestLinuxRelease() rejects it and
 // /api/releases/linux/latest answers 503 - failing closed rather than handing
 // an installer a digest that cannot match what it downloads.
-const PENDING_DIGEST = "pending-release-digest";
 const RELEASE_FALLBACK_TAG = "v0.0.40";
 const RELEASE_FALLBACK = {
   tag_name: RELEASE_FALLBACK_TAG,
   draft: false,
   prerelease: false,
   assets: [
-    ["1Helm-0.0.40-arm64.dmg", PENDING_DIGEST],
-    ["1Helm-0.0.40-mac-arm64.zip", PENDING_DIGEST],
-    ["1Helm-0.0.40-linux-node.tgz", PENDING_DIGEST],
+    ["1Helm-0.0.40-arm64.dmg", "d96868530bbeb3708e82d027bd079c129bf064e16e3d1e7482a999dd5a1e439a"],
+    ["1Helm-0.0.40-mac-arm64.zip", "a18f7b3e6e4c1c5f8e060d47a2fd1cba6461e1aa8ccafbbb5a24d6e43051ccfd"],
+    ["1Helm-0.0.40-linux-node.tgz", "95267b23753628a843cec0de54380355a04a6c9826ae60c37ce0da41b41d95e7"],
   ].map(([name, digest]) => ({
     name,
     digest: `sha256:${digest}`,