release: add worker v0.1.0 binary tarball

- Add releases/worker_0.1.0_linux_amd64.tar.gz (327KB)
- Update pkgs/worker/default.nix with real SHA256 hash
- Add clear dotfiles integration instructions
- Un-ignore releases/ for distribution via git forge

Dotfiles can now fetch worker binary from:
  https://git.clarun.xyz/dan/skills/raw/branch/master/releases/worker_0.1.0_linux_amd64.tar.gz

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.gitignore

@@ -30,4 +30,5 @@ Thumbs.db
 # Review gate state (transient)
 .review-state/
 .worker-state/
-releases/
+# Keep release tarballs in git for easy distribution
+# releases/

pkgs/worker/default.nix

@@ -1,17 +1,17 @@
 # Worker CLI Nix Package
 #
-# This package installs the worker CLI binary from a release tarball.
+# Multi-agent worker coordination CLI for HQ orchestration.
 # See docs/releasing-worker.md for how to create releases.
 #
-# To use:
+# DOTFILES INTEGRATION:
-# 1. Copy this to dotfiles/pkgs/worker/default.nix
+# 1. Copy this file to dotfiles/pkgs/worker/default.nix
-# 2. Update the URL to point to your release location
+# 2. Uncomment the appropriate src option below
-# 3. Update the sha256 hash (use nix-prefetch-url --unpack <url>)
+# 3. Add to your configuration:
-# 4. Add to your system/home configuration
+#      worker = pkgs.callPackage ./pkgs/worker {};
+#      home.packages = [ worker ];
 
 { lib
 , stdenvNoCC
-, fetchzip
 , fetchurl
 , autoPatchelfHook
 , stdenv
@@ -21,26 +21,19 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "worker";
   version = "0.1.0";
 
-  # Option 1: Fetch from GitHub releases (when available)
+  # Option A: Fetch from skills repo tarball (recommended)
-  # src = fetchzip {
+  # Update URL to your git forge's raw file URL
-  #   url = "https://github.com/OWNER/skills/releases/download/worker-v${finalAttrs.version}/worker_${finalAttrs.version}_linux_amd64.tar.gz";
-  #   sha256 = lib.fakeHash;  # Replace after first build attempt
-  #   stripRoot = false;
-  # };
-
-  # Option 2: Fetch from local/private git forge
-  # src = fetchzip {
-  #   url = "https://git.example.com/releases/worker_${finalAttrs.version}_linux_amd64.tar.gz";
-  #   sha256 = lib.fakeHash;
-  #   stripRoot = false;
-  # };
-
-  # Option 3: Local file (for testing)
   src = fetchurl {
-    url = "file:///home/dan/proj/skills/releases/worker_${finalAttrs.version}_linux_amd64.tar.gz";
+    url = "https://git.clarun.xyz/dan/skills/raw/branch/master/releases/worker_${finalAttrs.version}_linux_amd64.tar.gz";
-    sha256 = "sha256-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=";  # Will fail, get real hash from error
+    sha256 = "sha256-Lz+gnjeedjwVV31rcijjQpMguMrBfvSfOUcOyLaFiI8=";
   };
 
+  # Option B: Local file (for testing)
+  # src = fetchurl {
+  #   url = "file:///home/dan/proj/skills/releases/worker_${finalAttrs.version}_linux_amd64.tar.gz";
+  #   sha256 = "sha256-Lz+gnjeedjwVV31rcijjQpMguMrBfvSfOUcOyLaFiI8=";
+  # };
+
   sourceRoot = ".";
 
   nativeBuildInputs = [