Tags: privapps/github-copilot-svcs

fix: Prevent invalid or overlapping release runs by verifying code be…

…fore publishing and pinning workflow actions

- Added workflow-level `concurrency` to prevent multiple release runs on the same ref from executing at the same time.
- Introduced a new `verify` job that runs before release work:
  - checks out the repository
  - sets up Go 1.23
  - downloads module dependencies
  - runs `go test -v -race ./...`
  - runs `golangci-lint` v2.1
- Made the `release` job depend on `verify`, so release versioning only continues after tests and lint pass.
- Updated GitHub Actions references to pinned commit SHAs for:
  - `actions/checkout`
  - `actions/setup-go`
  - `actions/upload-artifact`
  - `docker/setup-buildx-action`
  - `docker/login-action`
- Removed the `create-release` job that previously downloaded artifacts and created the GitHub Release in this workflow.
- Simplified the `docker` job dependency chain to depend only on `release`.
- Impact:
  - improves release safety by blocking broken code earlier
  - reduces risk of duplicate or conflicting release runs
  - makes workflow execution more reproducible and secure through pinned action versions
  - changes release publication flow by removing in-workflow GitHub Release creation

Enhance release workflow by uploading artifacts and organizing them f…

…or the release process

Update Readme and improve config loading with optional token validation

fix release tag