ci: use temp file for sftp batch commands instead of stdin pipe

sshpass works by forking the child with a PTY so it can intercept SSH's
password prompt. Piping commands into sshpass via | replaces its stdin,
breaking the PTY-based password injection.

Instead, write the sftp batch commands to a mktemp file and pass it with
-b "$SFTP_BATCH". This leaves sshpass's stdin untouched so the PTY works
correctly, while sftp reads its commands from the temp file.

Co-authored-by: igaw <[email protected]>

Author: Copilot

.github/workflows/upload.yml

@@ -82,13 +82,14 @@ jobs:
             echo "    PreferredAuthentications password"
           } > ~/.ssh/config
           chmod 600 ~/.ssh/config
-          (
-            echo "cd /upload"
-            for f in upload/nvme-cli-*; do
-              [ -f "$f" ] || continue
-              echo "put $f $(basename "$f")"
-            done
-          ) | sshpass -e sftp -b - "${SFTP_USERNAME}@${SFTP_SERVER}"
+          SFTP_BATCH=$(mktemp)
+          echo "cd /upload" > "$SFTP_BATCH"
+          for f in upload/nvme-cli-*; do
+            [ -f "$f" ] || continue
+            echo "put $f $(basename "$f")" >> "$SFTP_BATCH"
+          done
+          sshpass -e sftp -b "$SFTP_BATCH" "${SFTP_USERNAME}@${SFTP_SERVER}"
+          rm -f "$SFTP_BATCH"
 
   upload-release-assets:
     name: upload GitHub release assets