chore: Clean up release artifacts and add uninstall-completions

- Remove binary_signs to eliminate confusing 119-byte signature files
- Add make uninstall-completions command for cleaning up shell completions
- Add completions/ and manpages/ to .gitignore (generated during build)
- Update Docker labels to use template variables
- Update README files with generated documentation

The release now includes only essential artifacts:
- Archive files with binaries (.tar.gz, .zip)
- checksums.txt with GPG signature
- SBOM files for security scanning

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: jackspirou

.gitignore

@@ -39,6 +39,8 @@ starmap.darwin
 starmap.linux
 starmap.windows
 dist/
+completions/
+manpages/
 build/
 bin/
 

.goreleaser.yaml

@@ -181,12 +181,12 @@ dockers_v2:
     build_args:
       BUILDKIT_INLINE_CACHE: "1"
     labels:
+      org.opencontainers.image.name: "{{.ProjectName}}"
+      org.opencontainers.image.description: "AI Model Catalog System"
       org.opencontainers.image.created: "{{.Date}}"
-      org.opencontainers.image.title: "{{.ProjectName}}"
       org.opencontainers.image.revision: "{{.FullCommit}}"
       org.opencontainers.image.version: "{{.Version}}"
-      org.opencontainers.image.source: "https://github.com/agentstation/starmap"
-      org.opencontainers.image.description: "AI Model Catalog System"
+      org.opencontainers.image.source: "{{.GitURL}}"
       org.opencontainers.image.licenses: "AGPL-3.0"
 
 # Homebrew Cask
@@ -267,18 +267,22 @@ signs:
       - "${artifact}"
     artifacts: checksum
 
-# Binary signing (requires signing key setup)
-binary_signs:
-  - cmd: gpg
-    args:
-      - "--batch"
-      - "--yes"
-      - "--pinentry-mode"
-      - "loopback"
-      - "--passphrase"
-      - "{{ .Env.GPG_PASSPHRASE }}"
-      - "--output"
-      - "${signature}"
-      - "--detach-sig"
-      - "${artifact}"
-    artifacts: binary
+# Binary signing disabled - checksums.txt signing provides sufficient verification
+# Individual binary signatures add confusion without significant security benefit
+# since binaries are already distributed in archives with signed checksums.
+# Uncomment below to sign individual binaries if needed:
+# binary_signs:
+#   - signature: "${artifact}.sig"
+#     cmd: gpg
+#     args:
+#       - "--batch"
+#       - "--yes"
+#       - "--pinentry-mode"
+#       - "loopback"
+#       - "--passphrase"
+#       - "{{ .Env.GPG_PASSPHRASE }}"
+#       - "--output"
+#       - "${signature}"
+#       - "--detach-sig"
+#       - "${artifact}"
+#     artifacts: binary

Makefile

@@ -97,6 +97,37 @@ uninstall: ## Uninstall the binary from GOPATH/bin
 		echo "$(YELLOW)$(BINARY_NAME) not found in $$GOPATH_BIN$(NC)"; \
 	fi
 	@echo "$(BLUE)Also removing shell completions if installed...$(NC)"
+	@$(MAKE) uninstall-completions
+
+uninstall-completions: ## Remove all starmap shell completions
+	@echo "$(BLUE)Removing starmap shell completions...$(NC)"
+	@# Homebrew completions
+	@if [ -f "/opt/homebrew/etc/bash_completion.d/starmap" ]; then \
+		rm -f "/opt/homebrew/etc/bash_completion.d/starmap"; \
+		echo "$(GREEN)✅ Removed Homebrew bash completion$(NC)"; \
+	fi
+	@if [ -f "/opt/homebrew/share/zsh/site-functions/_starmap" ]; then \
+		rm -f "/opt/homebrew/share/zsh/site-functions/_starmap"; \
+		echo "$(GREEN)✅ Removed Homebrew zsh completion$(NC)"; \
+	fi
+	@if [ -f "/opt/homebrew/share/fish/vendor_completions.d/starmap.fish" ]; then \
+		rm -f "/opt/homebrew/share/fish/vendor_completions.d/starmap.fish"; \
+		echo "$(GREEN)✅ Removed Homebrew fish completion$(NC)"; \
+	fi
+	@# Linux standard locations
+	@if [ -f "/usr/local/etc/bash_completion.d/starmap" ]; then \
+		rm -f "/usr/local/etc/bash_completion.d/starmap"; \
+		echo "$(GREEN)✅ Removed Linux bash completion$(NC)"; \
+	fi
+	@if [ -f "/usr/local/share/zsh/site-functions/_starmap" ]; then \
+		rm -f "/usr/local/share/zsh/site-functions/_starmap"; \
+		echo "$(GREEN)✅ Removed Linux zsh completion$(NC)"; \
+	fi
+	@if [ -f "/usr/local/share/fish/vendor_completions.d/starmap.fish" ]; then \
+		rm -f "/usr/local/share/fish/vendor_completions.d/starmap.fish"; \
+		echo "$(GREEN)✅ Removed Linux fish completion$(NC)"; \
+	fi
+	@echo "$(GREEN)Shell completions cleanup complete$(NC)"
 	@if command -v starmap >/dev/null 2>&1; then \
 		starmap uninstall completion 2>/dev/null || echo "$(YELLOW)⚠️  Some completions may not have been removed$(NC)"; \
 	else \