fix: pin the CREDITS module closure to the shipped linux target

The go list -deps closure is GOOS-specific, so the CREDITS generated on
darwin (carrying go-m1cpu) could never match a Linux regeneration
(ethtool, numcpus), and the check-gen guard failed on its first CI run.
Generation now pins linux/amd64 with the release build tags, so the
output is identical on every host.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

buildscripts/gen-credits.sh

@@ -62,7 +62,12 @@ fi
   emit_text "${go_license}"
   printf '\n%s\n\n' "${rule_equal}"
 
-  go list -deps -f '{{if and (not .Standard) .Module}}{{.Module.Path}}{{end}}' . \
+  # The dependency closure is GOOS/GOARCH-specific: platform-only modules
+  # (darwin's go-m1cpu, windows' wmi, ...) enter and leave it with the host.
+  # Pin the primary shipped target and the release build tags so regenerating
+  # CREDITS produces identical output on every machine, including CI.
+  GOOS=linux GOARCH=amd64 go list -deps -tags kqueue \
+    -f '{{if and (not .Standard) .Module}}{{.Module.Path}}{{end}}' . \
     | LC_ALL=C sort -u \
     | grep -vx 'github.com/minio/minio' \
     | xargs go list -m -f '{{.Path}}|{{with .Replace}}{{.Path}}{{end}}|{{.Dir}}' \