fix: strip debug symbols from CLI binary to reduce distribution size

[beonde]

Summary

• Adds -w -s ldflags to the build-cli Makefile target, matching what the Dockerfile already does
• Removes DWARF debug info (-w) and the symbol table (-s) from the distributed binary
• Also injects version and commit build vars inline with the Dockerfile pattern

Why

The CLI binary distributed by capiscio-python and capiscio-node wrappers was ~50MB because make build-cli was doing a bare go build with no stripping. The Dockerfile build has had -w -s for a long time — this just closes the gap for the Makefile path used during releases.

Before: ~50MB
After: ~14MB (~70% reduction)

Further reduction to ~6-7MB is possible with UPX compression if needed, but that adds startup latency and can be a follow-up.

Test plan

• make build-cli compiles without errors
• ./bin/capiscio --version reports correct version
• Binary is functional (badge issue/verify, gateway start)
• Confirm binary size reduction: ls -lh bin/capiscio

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Updates the release/build path for the CapiscIO CLI so that make build-cli produces a smaller distributable binary (aligning with the Docker build) by stripping debug info and embedding build metadata.

Changes:

• Add -w -s to go build linker flags for build-cli to strip DWARF and symbol table.
• Inject VERSION and COMMIT into the binary via -ldflags -X ... during make build-cli.

[Copilot]

-ldflags sets -X main.commit=$(COMMIT), but there is no commit string variable in the cmd/capiscio main package (only var version = "2.4.0" exists). This will cause make build-cli to fail at link time with an unknown symbol error. Either define var commit = "unknown" in the main package (and optionally include it in the --version output) or drop the -X main.commit=... flag here to keep the build working.

Suggested change

	go build -ldflags="-w -s -X main.version=$(VERSION) -X main.commit=$(COMMIT)" \
	go build -ldflags="-w -s -X main.version=$(VERSION)" \

[beonde]

Good catch. Added var commit = "unknown" to the main package and included it in the --version output: capiscio version v2.4.0 (commit: 807ddc4). Note that Go's linker silently ignores unknown -X targets so the build wouldn't have failed, but having the variable defined is the correct approach. See commit a8f8f24.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!