fix: SSH key corruption in deploy and wrong ldflags package path

[Copilot]

The CI "build" job was failing at deploy with Permission denied (publickey,password) — SSH key auth silently failed due to potential \r corruption in the key file, then fell back to password auth which also fails. A secondary bug caused gitHash/buildTime to never be injected into the binary.

Changes

.github/workflows/deploy.sh — SSH key handling

• Strip \r from the key before writing to disk (tr -d '\r') to handle Windows-style line endings in the GitHub Secret
• Add -o BatchMode=yes -o PasswordAuthentication=no to scp/ssh to disable interactive password fallback and fail fast on key auth failure

- echo "$SSH_KEY" > key.pem
+ echo "$SSH_KEY" | tr -d '\r' > key.pem

- scp -o StrictHostKeyChecking=no -i key.pem ...
+ scp -o StrictHostKeyChecking=no -o BatchMode=yes -o PasswordAuthentication=no -i key.pem ...

.github/workflows/deploy.yml — go build ldflags

• gitHash and buildTime are package-level vars in main (config_util.go), not in the non-existent internal/global package. Go silently ignores unknown -X targets, so the binary was always built with empty version info.

- go build -ldflags="-X 'github.com/unchainese/unchain/internal/global.gitHash=...' ..."
+ go build -ldflags="-X 'main.gitHash=...' -X 'main.buildTime=...'"

[mojocn]

@copilot resolve the merge conflicts in this pull request

[Copilot]

@copilot resolve the merge conflicts in this pull request

Merge conflicts resolved in commit fix: resolve merge conflicts with main. The resolution combines our tr -d '\r' fix with the structural improvements from main's deploy.sh (set -e, key validation, UserKnownHostsFile, ConnectTimeout, key cleanup). For deploy.yml, the clean build line from our branch was kept, discarding the duplicate-text artifact in main's version.

[Copilot]

Pull request overview

This PR fixes a CI deploy failure caused by SSH key formatting issues (CRLF/\r in the secret) and corrects Go build metadata injection so gitHash/buildTime are properly embedded into the produced binary.

Changes:

• Harden SSH key materialization in the deploy script by stripping \r before writing key.pem.
• Make scp/ssh fail fast on auth failures by disabling interactive/password fallback via SSH options.
• Fix the go build -ldflags -X targets so version variables in the main package are actually set, and clean up a deploy step label typo.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
.github/workflows/deploy.yml	Fixes Go linker -X targets for version metadata injection and corrects the deploy step label.
.github/workflows/deploy.sh	Improves SSH key file creation (CR stripping) and tightens SSH/SCP auth behavior to fail fast.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.