chore: prepare release v0.36.0

Assisted-by: GLM 5.3 Flash

.gitea/workflows/freebsd.yml

@@ -1,41 +0,0 @@
-# FreeBSD compile gates. Dispatched by hand, never on a push.
-#
-# The debugger's ptrace surface and the JIT substrate are the two
-# FreeBSD-portable layers the tree carries; the forge has no FreeBSD runner,
-# so they can only be compile-gated, and three foreign-GOOS builds of the
-# whole module are minutes of one-core work the push pipeline's budget cannot
-# carry. The push pipeline stays fast and light; this workflow is the
-# deliberate run, before a release or after touching the ported layers.
-# Running the ptrace suite itself needs real FreeBSD hardware.
-#
-# A dispatched workflow takes no concurrency block: it is one deliberate run.
-name: FreeBSD build
-
-on:
-  workflow_dispatch:
-
-env:
-  # One core: parallelism buys no speed here and costs memory the box does not have.
-  GOFLAGS: -p=1
-  GOMAXPROCS: "2"
-
-jobs:
-  build:
-    runs-on: fedora
-    steps:
-      - uses: actions/checkout@v7
-
-      - uses: actions/setup-go@v6
-        with:
-          # The module is the source of truth for the version, so it cannot drift.
-          go-version-file: go.mod
-          cache: true
-
-      - name: FreeBSD build (amd64)
-        run: GOOS=freebsd GOARCH=amd64 go build ./...
-
-      - name: FreeBSD build (arm64)
-        run: GOOS=freebsd GOARCH=arm64 go build ./...
-
-      - name: FreeBSD build (riscv64)
-        run: GOOS=freebsd GOARCH=riscv64 go build ./...

.gitea/workflows/release.yml

@@ -11,9 +11,12 @@
 # (devel) even at its own <module>/vX.Y.Z tag and this workflow's smoke test can never
 # pass for it. A Go repository is one module at the root.
 #
-# The matrix carries the platforms the project ships: Linux on amd64, arm64, loong64
-# and riscv64. The FreeBSD port compiles in its own dispatched workflow and ships no
-# binary. Nothing is installed: the fedora job image carries git, perl and node
+# The matrix carries the platforms the project ships: Linux on amd64, arm64,
+# loong64 and riscv64, and FreeBSD on amd64 and arm64.  Go cross-compiles
+# FreeBSD natively and the tree builds under CGO_ENABLED=0, which the
+# suite's cross-build gates prove for the whole module; the ptrace suite
+# itself still needs a FreeBSD machine, so nothing FreeBSD runs here.
+# Nothing is installed: the fedora job image carries git, perl and node
 # (verified on the runner, 2026-10-04).
 #
 # Each job validates the tag for itself rather than passing a value between jobs, so
@@ -46,6 +49,10 @@ jobs:
             goarch: loong64
           - goos: linux
             goarch: riscv64
+          - goos: freebsd
+            goarch: amd64
+          - goos: freebsd
+            goarch: arm64
     steps:
       - uses: actions/checkout@v7
 

.gitea/workflows/suite.yml

@@ -1,9 +1,11 @@
 # Suite, Go. Dispatched by hand, on development. Never a push gate.
 #
-# The complete gate set minus race: the build, both static gates, the full suite with
-# every short-layer skip unskipped, and the coverage floor. It is the pipeline form of
-# the local `just test`, for the moments when the tree must be proven end to end and
-# nobody is at the keyboard.
+# The complete gate set minus race: the build, the FreeBSD cross-builds the
+# port's compile proof needs (amd64 and arm64, the same two the release
+# matrix ships), both static gates, the full suite with every short-layer
+# skip unskipped, and the coverage floor. It is the pipeline form of the
+# local `just test`, for the moments when the tree must be proven end to end
+# and nobody is at the keyboard.
 #
 # Race never runs in CI. It roughly doubles the time and the memory on a box shared
 # with the forge, and the local `just gates` races the tree on the machine at the
@@ -33,6 +35,14 @@ jobs:
       - name: Build
         run: go build ./...
 
+      - name: FreeBSD build (amd64)
+        # The port is pure Go: the cross-build needs no C toolchain and the
+        # release matrix ships the same two binaries.
+        run: CGO_ENABLED=0 GOOS=freebsd GOARCH=amd64 go build ./...
+
+      - name: FreeBSD build (arm64)
+        run: CGO_ENABLED=0 GOOS=freebsd GOARCH=arm64 go build ./...
+
       - name: Format
         run: |
           perl -e '