fix: standalone download - remove two-stage logic and rename assets

[jpoley]

Summary

• Fixes upgrade-repo failure caused by two-stage download trying to use deleted zip file
• Renames release assets from spec-kit-template-* to flowspec-template-*
• Simplifies download to single-stage (one download per agent)
• Prefers new naming over legacy when both exist
• Adds robust tests with URL tracking assertions
• Version 0.4.1

Test plan

• All tests pass

🤖 Generated with Claude Code

[github-actions]

🟢 Security Scan Results (Advisory)

Note: Security scanning is advisory and does not block PR merges.

• Total Findings: 11
• Critical: 0
• High: 0

No critical or high severity issues found.

How to remediate

# View detailed scan results
gh run download 20833281021 -n security-scan-results-ff161bd11ffee0979db619a58028af4fe94ff7fc

# Triage findings with AI assistance
specify security triage

# Generate fix suggestions
specify security fix

# Apply fixes and re-scan
flowspec security scan

See the Security tab for detailed findings.

[Copilot]

Pull request overview

This PR simplifies the flowspec template download architecture by removing the legacy two-stage download logic (base + extension) and renaming release assets from spec-kit-template-* to flowspec-template-*. The changes address an upgrade failure caused by the two-stage logic attempting to use deleted zip files.

Key changes:

• Consolidated from two downloads per agent (base + extension) to a single download per agent
• Renamed release assets with new flowspec-template-* naming convention
• Added backward compatibility to support legacy spec-kit-template-* naming with preference for new naming

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
src/flowspec_cli/__init__.py	Updated download logic to single-stage, added asset naming fallback (new pattern preferred over legacy), improved docstrings, bumped version to 0.4.1
tests/test_multi_agent.py	Refactored tests from two-stage (base+extension) to single-stage download model, simplified mock logic
tests/test_github_auth.py	Updated asset names in existing tests, added comprehensive tests for legacy naming fallback and new naming preference
.github/workflows/scripts/create-release-packages.sh	Changed zip filename pattern from spec-kit-template-* to flowspec-template-*
.github/workflows/scripts/create-github-release.sh	Updated all asset references to use new flowspec-template-* naming
build-docs/CONTRIBUTING-AGENTS.md	Updated documentation examples to reflect new asset naming
pyproject.toml	Version bump to 0.4.1

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.