We need to adjust the fallback path so that only MAJOR.MINOR.PATCH version is included:

Signature downloads from releases.coder.com fail due to a mismatch between the value returned by the buildinfo endpoint and the object names in the underlying GCS bucket.

Example:

Currently the handler would attempt to fetch the signature from:
https://releases.coder.com/coder-cli/2.24.1+f97bd76/{detached_signature} 🔴

Should be:
https://releases.coder.com/coder-cli/2.24.1/{detached_signature} 🟢