runtime-go-toolchain

SUSPICIOUS: the core provisioning behavior is broadly consistent with a Go runtime skill, but it unnecessarily reroutes Go module traffic through the third-party goproxy.cn endpoint and omits the proxy's documented direct fallback. That data-flow change is the main concern; the apt-based installation path itself is normal and not malicious.