API: Return pqsigs

I fixed a bunch of simple lint-like issues so agents wouldn't have to
talk about them anymore.

The test waited for netB's outbound peer count to reach 1, then immediately asserted netA's inbound count with no retry. Those two registrations are not ordered with respect to each other: WebsocketNetwork.ServeHTTP writes the 101 response in upgrader.Upgrade() and only calls addPeer() after building the peer and running peer.init(), while netB registers its outbound peer as soon as its dial returns from reading that 101.

Extend the existing Eventually to cover netA's inbound peer as well, so the following exact count assertions run once both ends have registered. Reproducible before the change by sleeping between peer.init() and addPeer() in wsNetwork.go.

Use the runner-provided GITHUB_REF/GITHUB_REF_NAME defaults in the Upload Binaries step instead of interpolating github.ref / github.ref_name into the shell script. Git ref names may contain quotes, backticks, semicolons and pipes, so the interpolated form was the same command-injection class this branch already fixed for CI_E2E_FILENAME.

Also strip CR/LF from the branch name before writing CI_E2E_FILENAME to $GITHUB_ENV. workflow_dispatch inputs are free-form, and an embedded newline would append extra entries to the env file that later steps in the job would inherit. Quote $GITHUB_ENV while there.

No behavior change: rel/nightly still sets NIGHTLY_BUILD, TRAVIS_BRANCH still gets the short ref name, and CI_E2E_FILENAME still maps '/' to '-'.