fix: harden desktop release OSS uploads

server/internal/shared/objectstorage/minio.go

@@ -161,20 +161,9 @@ func (c *minioClient) PutReader(
 }
 
 func (c *minioClient) GetBytes(ctx context.Context, objectKey string) ([]byte, error) {
-	if err := c.Validate(); err != nil {
-		return nil, err
-	}
-	reader, err := c.client.GetObject(ctx, c.bucket, objectKey, minio.GetObjectOptions{})
+	reader, err := c.GetReader(ctx, objectKey)
 	if err != nil {
-		c.logError(ctx, "minio get object failed",
-			zap.String("bucket", c.bucket),
-			zap.String("object_key", objectKey),
-			zap.Error(err),
-		)
-		if isMinIOObjectNotFound(err) {
-			return nil, fmt.Errorf("%w: %s", ErrObjectNotFound, objectKey)
-		}
-		return nil, fmt.Errorf("get minio object: %w", err)
+		return nil, err
 	}
 	defer reader.Close()
 
@@ -193,6 +182,25 @@ func (c *minioClient) GetBytes(ctx context.Context, objectKey string) ([]byte, e
 	return data, nil
 }
 
+func (c *minioClient) GetReader(ctx context.Context, objectKey string) (io.ReadCloser, error) {
+	if err := c.Validate(); err != nil {
+		return nil, err
+	}
+	reader, err := c.client.GetObject(ctx, c.bucket, objectKey, minio.GetObjectOptions{})
+	if err != nil {
+		c.logError(ctx, "minio get object failed",
+			zap.String("bucket", c.bucket),
+			zap.String("object_key", objectKey),
+			zap.Error(err),
+		)
+		if isMinIOObjectNotFound(err) {
+			return nil, fmt.Errorf("%w: %s", ErrObjectNotFound, objectKey)
+		}
+		return nil, fmt.Errorf("get minio object: %w", err)
+	}
+	return reader, nil
+}
+
 func isMinIOObjectNotFound(err error) bool {
 	responseErr := minio.ToErrorResponse(err)
 	return responseErr.StatusCode == 404 ||