Refactor release process to support php-windows-builder

[alcaeus]

The GitHub action used to build windows packages runs the actions/checkout action without passing any parameters. This causes issues when the ref being built is not the same as the one that triggered the original workflow run. Our release workflow is triggered with a workflow_dispatch event on the branch we want to release, which then creates a tag from this branch before building packages for the newly created tag. This causes issues when building the tag, as the checkout invoked extension build action switches the checked out ref leading to build issues.

This PR splits the release process into two distinct actions:

1. Preparing the release: as previously, this is triggered by a workflow_dispatch event and creates the release tag and draft release.
2. Creating release artifacts: this new workflow is triggered when a new tag is pushed and runs the second part of the release process: running static analysis, creating release packages, and uploading SSDLC assets.

With this change, the package build is done in a workflow that uses the correct ref and ref_name in the github context and environment variables, and should thus avoid the issues we've encountered previously.

Note: due to the nature of release tooling, these changes can only be tested as part of an actual release, and only in this canonical repository as other repository don't have access to the necessary credentials and secrets. As a silver lining, we can quickly iterate since we don't need to wait for CI to complete before merging pull requests.

[Copilot]

Pull request overview

This PR refactors the release workflow to address issues with the php-windows-builder action by splitting the release process into two separate workflows. The original workflow created a tag and then attempted to build packages for that tag within the same workflow run, causing github.ref context mismatches during checkout operations.

Changes:

• Split release workflow into preparation (tag/draft creation) and artifact creation (building/publishing)
• New create-release-artifacts.yml workflow triggered on tag push events
• Updated create-release-packages.yml to accept dynamic ref parameter

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
.github/workflows/release.yml	Removed artifact creation jobs (static-analysis, package-release, publish-ssdlc-assets) to focus solely on release preparation
.github/workflows/create-release-packages.yml	Changed to use dynamic ref input instead of hardcoded tag reference
.github/workflows/create-release-artifacts.yml	New workflow containing artifact creation jobs, triggered on tag push with proper github context

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.