Creating a Nix package for the CLI would make it easier to store it in a binary cache, eliminating the need to recompile it each time the update workflow is executed. Here is an example using buildGoApplication:
https://github.com/sestrella/iecs/blob/main/flake.nix#L33-L51