ci: pin solana release tooling

[dev-jodee]

Summary

• Pin the release workflow Solana CLI install to v4.0.0
• Update the shared setup action default Solana CLI version to v4.0.0
• Add workspace.metadata.cli.solana = "3.1.10" so solana-verify selects the supported verifiable-build image instead of inferring from Cargo.lock

Test Plan

• cargo metadata --format-version 1 --no-deps
• solana-verify build --library-name subscriptions -- --locked prints Found docker image for Solana version 3.1.10
• pre-push hook: just fmt-check
• pre-push hook: just lint-check

Notes

• The local solana-verify build still resolves subscriptions to clients/rust after image selection; that appears to be the existing library-name collision seen in the failed release run, separate from the Solana image metadata fix.

[github-actions]

Compute Unit Report

Instruction	Samples	Min CUs	Max CUs	Avg CUs	Est Cost (Low) [SOL]	Est Cost (Med) [SOL]	Est Cost (High) [SOL]
cancel_subscription	11	1721	2031	1916	0.000005000	0.000005076	0.000005958
close_subscription_authority	7	1804	1834	1808	0.000005000	0.000005072	0.000005904
create_fixed_delegation	38	3513	12543	5198	0.000005001	0.000005207	0.000007599
create_plan	84	3435	16948	5150	0.000005001	0.000005206	0.000007575
create_recurring_delegation	27	3537	11034	5096	0.000005001	0.000005203	0.000007548
delete_plan	8	361	361	361	0.000005000	0.000005014	0.000005180
init_subscription_authority	142	6228	21228	9229	0.000005002	0.000005369	0.000009614
revoke_delegation	19	256	520	354	0.000005000	0.000005014	0.000005177
subscribe	21	6476	11000	7772	0.000005002	0.000005310	0.000008886
transfer_fixed	6	5213	11210	8212	0.000005002	0.000005328	0.000009106
transfer_recurring	17	5325	11414	6421	0.000005001	0.000005256	0.000008210
transfer_subscription	10	5573	8576	6778	0.000005002	0.000005271	0.000008389
update_plan	21	423	502	475	0.000005000	0.000005019	0.000005237

Generated: 2026-05-19