ci: fix workflows; release: robust signing; bump to 2.3.6

Author: Karthikprasadm

.github/workflows/ci.yml

@@ -66,7 +66,7 @@ jobs:
           pip-audit -r sup-lang/pyproject.toml || true
       - name: Generate SBOM (CycloneDX)
         run: |
-          cyclonedx-py env -o sbom.json
+          cyclonedx-py environment -o sbom.json
       - name: Upload SBOM
         uses: actions/upload-artifact@v4
         with:

sup-lang/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sup-lang"
-version = "2.3.5"
+version = "2.3.6"
 description = "Sup: an English-like programming language (MVP)"
 readme = "README.md"
 requires-python = ">=3.9"

sup-lang/sup/__init__.py

@@ -1,6 +1,6 @@
 """Sup Language package."""
 
-__version__ = "2.3.5"
+__version__ = "2.3.6"
 
 from typing import TYPE_CHECKING