Build mirror 1 (CI only, not a product release)

Byte-identical copies of the sha256-pinned third-party archives that package builds download (age, restic, bubblewrap, cua-driver), used only as a fallback when the upstream GitHub asset is unavailable. Build scripts verify the pinned size and sha256 on every download; do not install these.