fix(ci): fix Windows build and upgrade Lux + action dependencies

[tkolleh]

Summary

Fixes the failing Windows release artifact build (Build Release Artifacts (windows-latest, windows-x86_64, windows)) and upgrades all pinned action dependencies to Node.js 24-compatible versions.

Root Causes Fixed

The Windows build had three compounding failures:

1. luastatic not on PATH — lx exec spawns a subprocess that doesn't inherit the MSYS2 PATH, so gcc (called by luastatic via os.execute()) was not found. Fixed by prepending /ucrt64/bin to PATH inside the compile recipe and adding an explicit GITHUB_PATH step in the workflow.

2. spin.exe not renamed to roda.exe — luastatic produces spin.exe on Windows, but the recipe unconditionally ran mv lua/spin roda. Fixed with a just os() conditional.

3. Missing Win32 compile flags — luasystem's src/core.c requires -D_WIN32_WINNT=0x0601 for proper Win32 API header resolution under MinGW-w64 UCRT64, and the final link step needs -lwinmm -lws2_32. Both added.

Changes

justfile

• build-system: Add -D_WIN32_WINNT=0x0601 compile flag on Windows
• compile: Prepend /ucrt64/bin to PATH for lx exec subprocess; add -lwinmm -lws2_32 linker flags on Windows; rename spin.exe → roda.exe on Windows via os() conditional

.github/workflows/release-please.yml

• Pin Windows runner to windows-2022 (non-rolling)
• Add GITHUB_PATH step for Lux build-deps bin dir (Windows only)
• Set CC=gcc explicitly in Windows build branch
• Upgrade actions/checkout v4.2.2 → v6.0.2 (SHA pinned)
• Upgrade msys2/setup-msys2 v2.24.1 → v2.31.1 (SHA pinned)
• Upgrade gh-actions-lux v1.0.0 → v1.0.1 (SHA pinned)
• Upgrade Lux CLI 0.28.0 → 0.28.2 (includes Windows lib prefix fix)

.github/workflows/tests.yml + publish.yml

• Upgrade actions/checkout v4.2.2 → v6.0.2 (SHA pinned, 3 occurrences)
• Upgrade gh-actions-lux v1.0.0 → v1.0.1 (SHA pinned)
• Upgrade Lux CLI 0.28.0 → 0.28.2

Dependency Upgrade Rationale

Dependency	Old	New	Reason
Lux CLI	0.28.0	0.28.2	Windows lib prefix fix (lux-lib: drop lib prefix on Windows)
actions/checkout	v4.2.2	v6.0.2	Node.js 20 deprecated; forced to Node.js 24 on 2026-06-02
gh-actions-lux	v1.0.0	v1.0.1	Initial Marketplace release
msys2/setup-msys2	v2.24.1	v2.31.1	Node.js 20 deprecated; forced to Node.js 24 on 2026-06-02

Testing

The Windows build job should now complete successfully. The Linux and macOS jobs are unaffected — the os() conditionals in the justfile evaluate to the else branch on those platforms, and the workflow PATH step is gated on matrix.target == 'windows'.