chore(release): bump to v0.3.7 -- backend version string + winget manifests; fix(ci): winget submission needs a Windows runner

Version bump: backend/main.go latestCLIVersion and the local
winget/manifests/*.yaml mirror to 0.3.7, with the real
InstallerUrl/InstallerSha256 for the cli/v0.3.7 release asset.

CI fix: the first real winget-submission attempt (v0.3.7, now that
WINGET_TOKEN is finally set) failed immediately -- wingetcreate isn't
published as a NuGet/dotnet-tool package at all, it's a native Windows
binary requiring .NET 6 + VC++ Redistributable. `dotnet tool install
--global wingetcreate` on ubuntu-latest could never have worked; this
path was just never exercised before since the empty-token check
always short-circuited it first. Split winget submission into its own
job on windows-latest, downloading wingetcreate.exe directly from its
GitHub release instead of dotnet tool install.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.github/workflows/cli-release.yml

@@ -108,8 +108,15 @@ jobs:
             msdl --list                                       # list all products
             ```
 
+  submit-winget:
+    # wingetcreate is a native Windows tool (needs .NET 6 + VC++ Redistributable) --
+    # it is NOT published as a NuGet/dotnet-tool package, so it can only run on a
+    # windows-latest runner, not ubuntu-latest like the release job above.
+    needs: release
+    runs-on: windows-latest
+    steps:
       - name: Submit winget update
-        if: success()
+        shell: bash
         env:
           WINGET_TOKEN: ${{ secrets.WINGET_TOKEN }}
         run: |
@@ -117,10 +124,10 @@ jobs:
             echo "WINGET_TOKEN not set, skipping winget update"
             exit 0
           fi
-          dotnet tool install --global wingetcreate
+          curl -L -o wingetcreate.exe https://github.com/microsoft/winget-create/releases/latest/download/wingetcreate.exe
           VERSION="${{ github.ref_name }}"
           VERSION="${VERSION#cli/v}"
-          wingetcreate update starkSV.msdl \
+          ./wingetcreate.exe update starkSV.msdl \
             --version "$VERSION" \
             --urls "https://github.com/starkSV/windows-iso-downloader/releases/download/${{ github.ref_name }}/msdl-windows-amd64.exe" \
             --submit \

backend/main.go

@@ -43,7 +43,7 @@ const (
 	CUSTOMER_ID = "560dc9f3-1aa5-4a2f-b63c-9e18f8d0e175"
 	PORT        = ":3002"
 
-	latestCLIVersion = "0.3.6"
+	latestCLIVersion = "0.3.7"
 )
 
 // --- Session cache (short-lived, used to chain /skuinfo → /proxy) ---

winget/manifests/starkSV.msdl.installer.yaml

@@ -1,5 +1,5 @@
 PackageIdentifier: starkSV.msdl
-PackageVersion: 0.3.6
+PackageVersion: 0.3.7
 Platform:
   - Windows.Desktop
 MinimumOSVersion: 10.0.0.0
@@ -8,7 +8,7 @@ Commands:
   - msdl
 Installers:
   - Architecture: x64
-    InstallerUrl: https://github.com/starkSV/windows-iso-downloader/releases/download/cli%2Fv0.3.6/msdl-windows-amd64.exe
-    InstallerSha256: 663690BCD5E95C91BA4E32171D243D9BD7C173E916332CDFF9EA16764F6DE6DA
+    InstallerUrl: https://github.com/starkSV/windows-iso-downloader/releases/download/cli%2Fv0.3.7/msdl-windows-amd64.exe
+    InstallerSha256: 44E9225BFE12DCE801301C2A68CBC114F57BA3313F775740BFC9A83CD87A431F
 ManifestType: installer
 ManifestVersion: 1.6.0

winget/manifests/starkSV.msdl.locale.en-US.yaml

@@ -1,5 +1,5 @@
 PackageIdentifier: starkSV.msdl
-PackageVersion: 0.3.6
+PackageVersion: 0.3.7
 PackageLocale: en-US
 Publisher: starkSV
 PublisherUrl: https://github.com/starkSV

winget/manifests/starkSV.msdl.yaml

@@ -1,5 +1,5 @@
 PackageIdentifier: starkSV.msdl
-PackageVersion: 0.3.6
+PackageVersion: 0.3.7
 DefaultLocale: en-US
 ManifestType: version
 ManifestVersion: 1.6.0