ci: publish GoReleaser drafts after artifact upload

[intel352]

Summary

• configure GoReleaser to keep GitHub releases as drafts while artifacts are uploaded
• publish the draft release only after the release workflow completes artifact/registry steps
• keep release workflows compatible with GitHub immutable releases

Verification

• actionlint on changed GoReleaser release workflow
• git diff --check

[Copilot]

Pull request overview

This PR updates the release pipeline so GoReleaser creates GitHub releases as drafts, and the workflow explicitly publishes the release only after the rest of the release workflow finishes (e.g., registry/notification steps). This supports compatibility with GitHub immutable releases by deferring the “publish” action until the end.

Changes:

• Configure GoReleaser to create draft GitHub releases (draft: true).
• Add a workflow step to publish the draft release via gh release edit ... --draft=false after downstream release steps complete.
• Quote the git clone URL used for syncing the manifest to the registry.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.goreleaser.yml	Sets release.draft: true so releases remain drafts during artifact upload.
.github/workflows/release.yml	Publishes the draft release at the end of the workflow and adjusts registry clone command quoting.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.