CI: Fix failure when fetching latest release tag on macOS/arm64

Refer to [1] and [2], leveraging ${{ secrets.GITHUB_TOKEN }} to be
authenticated which increases the Github API request rate limit.

[1] https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api?apiVersion=2022-11-28#primary-rate-limit-for-github_token-in-github-actions
[2] https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api?apiVersion=2022-11-28#getting-a-higher-rate-limit

Author: ChinYikMing

.github/workflows/main.yml

@@ -359,9 +359,27 @@ jobs:
        env:
          CC: ${{ steps.install_cc.outputs.cc }}
        run: |
-             make artifact
-             make ENABLE_SYSTEM=1 artifact
-             make ENABLE_ARCH_TEST=1 artifact
+             LATEST_RELEASE=$(wget --header="Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" -q \
+                                   https://api.github.com/repos/sysprog21/rv32emu-prebuilt/releases -O- \
+                                     | grep '"tag_name"' \
+                                     | grep "ELF" \
+                                     | head -n 1 \
+                                     | sed -E 's/.*"tag_name": "([^"]+)".*/\1/')
+             make LATEST_RELEASE=$LATEST_RELEASE artifact
+             LATEST_RELEASE=$(wget --header="Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" -q \
+                                   https://api.github.com/repos/sysprog21/rv32emu-prebuilt/releases -O- \
+                                     | grep '"tag_name"' \
+                                     | grep "Linux-Image" \
+                                     | head -n 1 \
+                                     | sed -E 's/.*"tag_name": "([^"]+)".*/\1/')
+             make LATEST_RELEASE=$LATEST_RELEASE ENABLE_SYSTEM=1 artifact
+             LATEST_RELEASE=$(wget --header="Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" -q \
+                                   https://api.github.com/repos/sysprog21/rv32emu-prebuilt/releases -O- \
+                                     | grep '"tag_name"' \
+                                     | grep "sail" \
+                                     | head -n 1 \
+                                     | sed -E 's/.*"tag_name": "([^"]+)".*/\1/')
+             make LATEST_RELEASE=$LATEST_RELEASE ENABLE_ARCH_TEST=1 artifact
              # Hack Cloudflare 403 Forbidden on GitHub Runner for Doom artifact download
              wget --header="User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" \
                   --header="Referer: https://www.doomworld.com/" \

mk/artifact.mk

@@ -43,25 +43,30 @@ define fetch-releases-tag
     $(if $(wildcard $(BIN_DIR)/$(2)), \
         $(info $(call warnx, $(3) is found. Skipping downloading.)), \
         $(eval LATEST_RELEASE := $(shell wget -q https://api.github.com/repos/sysprog21/rv32emu-prebuilt/releases -O- \
-                                    | grep '"tag_name"' \
-                                    | grep "$(1)" \
-                                    | head -n 1 \
-                                    | sed -E 's/.*"tag_name": "([^"]+)".*/\1/')) \
+                                         | grep '"tag_name"' \
+                                         | grep "$(1)" \
+                                         | head -n 1 \
+                                         | sed -E 's/.*"tag_name": "([^"]+)".*/\1/')) \
         $(if $(LATEST_RELEASE),, \
             $(error Fetching tag of latest releases failed) \
         ) \
     )
 endef
 
+LATEST_RELEASE ?=
+
 ifeq ($(call has, PREBUILT), 1)
-    ifeq ($(call has, SYSTEM), 1)
-        $(call fetch-releases-tag,Linux-Image,rv32emu-linux-image-prebuilt.tar.gz,Linux image)
-    else ifeq ($(call has, ARCH_TEST), 1)
-        $(call fetch-releases-tag,sail,rv32emu-prebuilt-sail-$(HOST_PLATFORM),Sail model)
-    else
-        $(call fetch-releases-tag,ELF,rv32emu-prebuilt.tar.gz,Prebuilt blob)
+    # On macOS/arm64 Github runner, let's leverage the ${{ secrets.GITHUB_TOKEN }} to prevent 403 rate limit error.
+    # Thus, the LATEST_RELEASE tag is defined at Github job steps, no need to fetch them here.
+    ifeq ($(LATEST_RELEASE),)
+         ifeq ($(call has, SYSTEM), 1)
+             $(call fetch-releases-tag,Linux-Image,rv32emu-linux-image-prebuilt.tar.gz,Linux image)
+         else ifeq ($(call has, ARCH_TEST), 1)
+             $(call fetch-releases-tag,sail,rv32emu-prebuilt-sail-$(HOST_PLATFORM),Sail model)
+         else
+             $(call fetch-releases-tag,ELF,rv32emu-prebuilt.tar.gz,Prebuilt benchmark)
+         endif
     endif
-
     PREBUILT_BLOB_URL = https://github.com/sysprog21/rv32emu-prebuilt/releases/download/$(LATEST_RELEASE)
 else
   # Since rv32emu only supports the dynamic binary translation of integer instruction in tiered compilation currently,