fix: homebrew cask postflight xattr references wrong binary name (#2899)
The postflight block ran xattr on staged_path/cog, but the actual binary
in the staged directory is named cog_Darwin_arm64 or cog_Darwin_x86_64.
The binary stanza only creates a symlink -- it doesn't rename the source.
Fix by constructing the correct filename using Hardware::CPU.arm? in the
postflight block.
Also extract the inline cask heredoc into a standalone .github/cog.rb.tmpl
template file. This makes the cask easier to read, edit, and diff. The
workflow now uses envsubst with an explicit variable list to substitute
only the shell placeholders while preserving Ruby interpolation.