ci(release): macos stage-2 binary selection by mtime (new fingerprint dir)

Stage 2's fingerprint includes the deployment target (the bootstrap's
does not), so its output lands in a different fingerprint directory;
'find | head -1' picked stage 1's dynamic binary and the static
assertion correctly rejected it. Select the newest binary instead.

Author: Sunrisepeak

.github/workflows/release.yml

@@ -341,9 +341,13 @@ jobs:
           "$STAGE1" --version
 
           # Stage 2: this release's mcpp rebuilds itself — flags.cppm's
-          # native staticStdlib link produces the static minos-11 binary.
+          # native staticStdlib link produces the static minos-14 binary.
+          # NOTE: stage 2 lands in a NEW fingerprint directory (its
+          # fingerprint includes the deployment target; the bootstrap's
+          # did not) — pick the most recently modified binary, not the
+          # first find hit.
           "$STAGE1" build --no-cache
-          MCPP_BIN=$(find target -path "*/bin/mcpp" | head -1)
+          MCPP_BIN=$(ls -t $(find target -path "*/bin/mcpp" -type f) | head -1)
           MCPP_BIN=$(cd "$(dirname "$MCPP_BIN")" && pwd)/$(basename "$MCPP_BIN")
           test -x "$MCPP_BIN"
           file "$MCPP_BIN"