fix workflow to fetch libsecp256k1.so

docs/LIBSECP256K1_DEPLOYMENT.md

@@ -1,6 +1,14 @@
 # libsecp256k1 Deployment Guide
 
-All build scripts have been updated to ensure libsecp256k1.so is placed next to the executable.
+> **NOTE (Updated 2025):** This project now uses pure Go with purego (no CGO). The crypto library is part of the external `git.mleku.dev/mleku/nostr` dependency. The `libsecp256k1.so` file is automatically downloaded from the nostr repository during build/test. See [CLAUDE.md](../CLAUDE.md) for current build instructions.
+
+## Current Approach (Pure Go + Purego)
+
+All build scripts download `libsecp256k1.so` from `https://git.mleku.dev/mleku/nostr/raw/branch/main/crypto/p8k/libsecp256k1.so` and place it next to the executable for optimal performance.
+
+## Legacy Information (For Reference)
+
+The information below describes the previous CGO-based approach and is kept for historical reference.
 
 ## Updated Scripts
 

docs/PUREGO_BUILD_SYSTEM.md

@@ -31,7 +31,7 @@ ORLY relay uses **pure Go builds (`CGO_ENABLED=0`)** across all platforms. The p
 
 ### Purego Dynamic Loading
 
-The p8k library (`pkg/crypto/p8k`) uses purego to:
+The p8k library (from `git.mleku.dev/mleku/nostr`) uses purego to:
 
 1. **At build time**: Compile pure Go code (`CGO_ENABLED=0`)
 2. **At runtime**: Attempt to dynamically load `libsecp256k1`
@@ -287,8 +287,11 @@ RUN go build -ldflags "-s -w" -o orly .
 
 # Runtime can optionally include library
 FROM alpine:latest
+RUN apk add --no-cache wget ca-certificates
 COPY --from=builder /build/orly /app/orly
-COPY --from=builder /build/pkg/crypto/p8k/libsecp256k1.so /app/ || true
+# Download libsecp256k1.so from nostr repository (optional for performance)
+RUN wget -q https://git.mleku.dev/mleku/nostr/raw/branch/main/crypto/p8k/libsecp256k1.so \
+    -O /app/libsecp256k1.so || echo "Warning: libsecp256k1.so download failed (optional)"
 ENV LD_LIBRARY_PATH=/app
 CMD ["/app/orly"]
 ```