Function verify_release 

pub fn verify_release(
    release: &PinnedRelease,
) -> Result<Vec<VerifyOutcome>, Error>

HEAD every supported platform URL for release. Returns one outcome per platform; callers decide how to surface failures.

Uses curl --head rather than reqwest so that Akamai’s bot-protection layer (which blocks reqwest’s TLS fingerprint from GitHub-hosted runner IPs) does not cause false 403 failures.

Errors

Currently always returns Ok(_) — individual platform failures are surfaced through VerifyOutcome::error. The Result wrapper is kept for forward compatibility if a top-level failure mode is added.