fix(artifacts): Support glob patterns and validate all configured patterns match

[BYK]

Summary

Fixes a class of silent misconfiguration bugs in artifact pattern matching, motivated by getsentry/cli#230 where 'sentry-*' in .craft.yml was silently treated as an exact match for the literal string "sentry-*" instead of matching "sentry-linux-x64" etc.

Changes

Glob pattern support (src/utils/filters.ts):

• patternToRegexp() now supports glob wildcards: * maps to .*, ? maps to . in regex
• Plain strings and /regex/ syntax remain unchanged
• New globToRegex() helper function

All-patterns-must-match validation (src/artifact_providers/github.ts):

• New validateAllPatternsMatched() method ensures every configured workflow pattern matched at least one workflow run, and every artifact pattern matched at least one artifact
• Runs after the existing retry/polling loop succeeds — "wait for CI" behavior is preserved
• Error messages include available workflow/artifact names for easy debugging
• Reports all mismatches at once

Publish-level safeguard (src/commands/publish.ts):

• When artifactProvider.config.artifacts is set but zero artifacts are found, reportError() stops the publish early instead of proceeding to targets that will individually fail with confusing messages

Backward Compatibility

• Plain strings without * or ?: behavior unchanged (exact match)
• /regex/ syntax: behavior unchanged
• Strings with * or ?: previously silently wrong (escaped the chars), now correctly treated as globs — this is a bugfix
• Legacy SHA-based artifact lookup: completely unaffected

Refs: getsentry/cli#230

[BYK]

Addressed the review feedback in e19fc46 — switched from .filter().length === 0 to !allRuns.some() for a more idiomatic check.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}