Preserve glibc 2.36 runtime compatibility (#365)

- Pin GNU runtime packs to glibc 2.36 Zig targets and reject incompatible imports.

- Provision verified Zig builds and exercise published artifacts on Debian Bookworm.

Fixes #349

Co-authored-by: Cruel <383999+Cruel@users.noreply.github.com>

.github/workflows/ci.yml

@@ -114,7 +114,7 @@ jobs:
   llvm_artifacts_linux_x64:
     name: test (Linux x64 LLVM artifacts, no clang)
     runs-on: ubuntu-24.04
-    timeout-minutes: 25
+    timeout-minutes: 30
     steps:
       - uses: actions/checkout@v4
       - uses: pnpm/action-setup@v4
@@ -135,10 +135,10 @@ jobs:
           echo "$RUNNER_TEMP/llvm-22.1.8/bin" >> "$GITHUB_PATH"
       - run: pnpm install --frozen-lockfile
       - run: pnpm --filter @scriptc/llvm-linux-x64-gnu build:native
-      - run: CC=clang AR=llvm-ar pnpm --filter @scriptc/runtime-linux-x64-gnu build:native
       - uses: vercel-labs/setup-zig@v1
         with:
           version: 0.16.0
+      - run: CC=zig AR=zig pnpm --filter @scriptc/runtime-linux-x64-gnu build:native
       - name: Build and verify Linux x64 musl release packages
         run: |
           pnpm --filter @scriptc/llvm-linux-x64-musl build:native
@@ -173,6 +173,14 @@ jobs:
         run: |
           node packages/cli/dist/main.js build tests/corpus/001-hello.ts -o "$RUNNER_TEMP/hello"
           test "$("$RUNNER_TEMP/hello")" = 'hello world'
+      - name: Debian 12 glibc 2.36 runtime-pack smoke
+        run: |
+          docker run --rm --volume "$GITHUB_WORKSPACE:/work:ro" --workdir /work node:24-bookworm-slim sh -ec '
+            apt-get update
+            apt-get install --yes --no-install-recommends clang
+            SCRIPTC_NO_CACHE=1 SCRIPTC_LEGACY_C_PIPELINE=0 node packages/cli/dist/main.js build tests/corpus/001-hello.ts -o /tmp/hello
+            test "$(/tmp/hello)" = "hello world"
+          '
       - name: WASI helper object/runtime-pack smoke
         run: pnpm test packages/cli/test/wasi-runtime-pack.test.ts
 

.github/workflows/release.yml

@@ -70,11 +70,13 @@ jobs:
             helper: llvm-linux-x64-gnu
             runtime: runtime-linux-x64-gnu
             llvm_asset: LLVM-22.1.8-Linux-X64
+            use_zig: true
           - platform: linux-arm64
             runner: ubuntu-24.04-arm
             helper: llvm-linux-arm64-gnu
             runtime: runtime-linux-arm64-gnu
             llvm_asset: LLVM-22.1.8-Linux-ARM64
+            use_zig: true
           - platform: windows-x64
             runner: windows-2022
             helper: llvm-win32-x64-msvc