ci: a runner label names the platform, not the org

hanzo-build-linux-amd64, lux-build-linux-amd64, zoo-build-linux-amd64 and
every other org-prefixed spelling all meant the same machine. Which org a
job belongs to does not change which host can build it, so the org bought
one pool name per org per arch and each could go stale on its own -- the
evo host alone answered to fourteen names for one label.

One vocabulary now: linux-amd64, linux-arm64, macos-arm64, win-amd64. The
generic labels every plain workflow uses (ubuntu-latest, self-hosted) are
untouched, so naive CI keeps working.

Co-authored-by: Hanzo Dev <[email protected]>

.hanzo/workflows/ci.yml

@@ -31,7 +31,7 @@ env:
 
 jobs:
   test:
-    runs-on: [lux-build-linux-amd64]
+    runs-on: [linux-amd64]
     timeout-minutes: 30
     env:
       GOEXPERIMENT: runtimesecret
@@ -46,7 +46,7 @@ jobs:
         run: CGO_ENABLED=1 go test -v -race -coverprofile=coverage.out ./...
 
   lint:
-    runs-on: [lux-build-linux-amd64]
+    runs-on: [linux-amd64]
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v4
@@ -63,7 +63,7 @@ jobs:
           skip-cache: true
 
   govulncheck:
-    runs-on: [lux-build-linux-amd64]
+    runs-on: [linux-amd64]
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v4
@@ -77,7 +77,7 @@ jobs:
 
   build:
     needs: [test, lint]
-    runs-on: [lux-build-linux-amd64]
+    runs-on: [linux-amd64]
     timeout-minutes: 20
     env:
       GOEXPERIMENT: runtimesecret

.hanzo/workflows/docs.yml

@@ -32,7 +32,7 @@ concurrency:
 
 jobs:
   build:
-    runs-on: [lux-build-linux-amd64]
+    runs-on: [linux-amd64]
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v4

.hanzo/workflows/release.yml

@@ -39,7 +39,7 @@ jobs:
       fail-fast: false
       matrix:
         arch: [amd64, arm64]
-    runs-on: [lux-build-linux-amd64]
+    runs-on: [linux-amd64]
     timeout-minutes: 90
     steps:
       - uses: actions/checkout@v4
@@ -93,7 +93,7 @@ jobs:
 
   manifest:
     needs: image
-    runs-on: [lux-build-linux-amd64]
+    runs-on: [linux-amd64]
     timeout-minutes: 20
     steps:
       - uses: docker/setup-buildx-action@v3
@@ -136,7 +136,7 @@ jobs:
         arch: [amd64, arm64]
     # arm64 cross-compiles via GOARCH; CGO_ENABLED=0 keeps it pure Go, so one
     # amd64 runner covers both and no cross-compiler is needed.
-    runs-on: [lux-build-linux-amd64]
+    runs-on: [linux-amd64]
     timeout-minutes: 30
     # luxfi/* are PUBLIC modules, fetched and checksum-verified through the
     # default immutable proxy.golang.org + sum.golang.org. No GOPRIVATE /
@@ -163,7 +163,7 @@ jobs:
 
   release:
     needs: binaries
-    runs-on: [lux-build-linux-amd64]
+    runs-on: [linux-amd64]
     timeout-minutes: 20
     steps:
       # v3 for the same reason the upload above is v3, and it has to be the SAME
@@ -181,7 +181,7 @@ jobs:
 
   notify:
     needs: [manifest, release]
-    runs-on: [lux-build-linux-amd64]
+    runs-on: [linux-amd64]
     timeout-minutes: 10
     steps:
       - name: Tell luxfi/universe the image is published